Portsmouth City Council

Portsmouth City Council could face hefty fines under General Data Protection Regulations.

It was discovered that for the past two years contractors have not been obliged to erase data when removing old computer drives.

Auditors were unsure if any drives were affected due to council records that were deemed ‘not sufficient.’

The report also showed that £8,000 worth of council IT equipment was unaccountable.

Source: https://www.portsmouth.co.uk/news/politics/data-leak-fears-raised-over-dumped-portsmouth-city-council-computers-may-have-not-been-wiped-1023652

TPRM report: https://scoringcyber.rankiteo.com/company/portsmouth-city-council

"id": "por12010822",
"linkid": "portsmouth-city-council",
"type": "Data Leak",
"date": "06/2018",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'industry': 'Public Sector',
                        'location': 'Portsmouth, UK',
                        'name': 'Portsmouth City Council',
                        'type': 'Government'}],
 'description': 'Portsmouth City Council could face hefty fines under General '
                'Data Protection Regulations due to contractors not erasing '
                'data when removing old computer drives for the past two '
                'years. Auditors were unsure if any drives were affected due '
                'to insufficient council records. Additionally, £8,000 worth '
                'of council IT equipment was unaccountable.',
 'impact': {'legal_liabilities': ['Potential GDPR fines']},
 'post_incident_analysis': {'root_causes': ['Inadequate data erasure protocols',
                                            'Insufficient record keeping']},
 'regulatory_compliance': {'regulations_violated': ['GDPR']},
 'title': 'Portsmouth City Council Data Handling Incident',
 'type': 'Data Handling Incident',
 'vulnerability_exploited': 'Inadequate data erasure protocols'}