Southwark Council

Samira Bouzkraoui, 24 illegally shared personal information about schoolchildren and their parents.

She has been prosecuted for the same. She took a screenshot of a council spreadsheet concerning children and their eligibility for free school meals.

The image included the names, addresses, dates of birth and National Insurance numbers of 37 pupils and their parents.

She also sent a copy of a school admission record relating to another child.

She was brought before Westminster magistrates where she admitted three offences of unlawfully obtaining and disclosing personal data, in breach of s55 of the Data Protection Act 1998.

She was fined £850 and was also ordered to pay £713 costs.

Source: https://www.databreaches.net/uk-former-council-worker-fined-for-sharing-personal-information-about-schoolchildren-and-parents-via-snapchat/

TPRM report: https://www.rankiteo.com/company/southwark-council

"id": "sou18526622",
"linkid": "southwark-council",
"type": "Ransomware",
"date": "6/1998",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'industry': 'Education',
                        'type': 'Educational Institution'}],
 'attack_vector': 'Insider Threat',
 'data_breach': {'data_exfiltration': True,
                 'number_of_records_exposed': 37,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Information',
                                              'Sensitive Information']},
 'description': 'Samira Bouzkraoui, 24, illegally shared personal information '
                'about schoolchildren and their parents. She took a screenshot '
                'of a council spreadsheet concerning children and their '
                'eligibility for free school meals. The image included the '
                'names, addresses, dates of birth, and National Insurance '
                'numbers of 37 pupils and their parents. She also sent a copy '
                'of a school admission record relating to another child. She '
                'was prosecuted for unlawfully obtaining and disclosing '
                'personal data, in breach of s55 of the Data Protection Act '
                '1998.',
 'impact': {'data_compromised': ['Names',
                                 'Addresses',
                                 'Dates of Birth',
                                 'National Insurance Numbers']},
 'post_incident_analysis': {'root_causes': 'Unauthorized Access to Sensitive '
                                           'Data'},
 'regulatory_compliance': {'fines_imposed': '£850',
                           'legal_actions': 'Prosecution',
                           'regulations_violated': 'Data Protection Act 1998'},
 'response': {'law_enforcement_notified': True},
 'threat_actor': 'Samira Bouzkraoui',
 'title': 'Illegal Sharing of Personal Information about Schoolchildren and '
          'Their Parents',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Unauthorized Access to Sensitive Data'}