organisation

Data Cymru

Data unit for Welsh local authorities

Security · ICO reprimands ONL and Data Cymru over weak password that left children's data exposed

The UK's Information Commissioner's Office (ICO) has reprimanded broadband provider Ogi Networks Limited (ONL) and the Welsh local government data unit Data Cymru for breaching GDPR rules. An investigation found that a dormant test account protected only by the password 'Password1' allowed cyber criminals to access the personal data of 3,300 people, the majority of whom were children.