The UK’s Information Commissioner has reprimanded the country’s Criminal Records Office (ACRO) for cybersecurity failings that left the personal information, including some sensitive data, of up to 10,000 people potentially compromised and exposed.
The incident took place between August 2022 and March 2023 when a hacker gained unauthorized access to the
After gaining