Skip to Primary Navigation

ICO fines water company $1.3m for data breach after cyber attack

Tap water running into a glass
The company received a 40% reduction to the fine after voluntary settlement. Photo: Justin Sullivan/Getty Images

Serious cyber attack resulted in the personal information of 633,887 people being extracted and published on the dark web, according to the regulator.

The UK’s information regulator has fined a water company £963,900 ($1.3m) after a serious cyber attack led to the personal data of over 633,000 customers and employees being compromised. The breach took place between 2020-2022.

The unauthorized access to data at South Staffordshire Plc and South Staffordshire Water Plc (together South Staffordshire)