# data[].attributes.attachment_link.readable_text
Share to email

Share to facebook

Share to twitter

Share to linkedin

Share to google

We help you make sense of your finances. Opinions expressed by Forbes Contributors are their own.

Bill Hardekopf , Contributor
A year ago, the country was rocked by the Target data breach. Previously, consumers rarely thought about the security on their credit or debit cards. But all that changed when Target reported that 40 million debit and credit card numbers had been stolen during the holiday shopping time last year.

Little did we know that data breaches would be the top story that haunted the card industry throughout 2014.

Here is a look back at 20 of the major data breaches of the past year:

Share to email

Share to facebook

Share to twitter

Share to linkedin

Share to google

# data[].attributes.attachment_link.description
A year ago, the country was rocked by the Target data breach. Previously, consumers rarely thought about the security on their credit or debit cards. But all that changed when Target reported that 40 million debit and credit card numbers had been stolen during the holiday shopping time last year.

# data[].attributes.headline
NHS top of the list for most serious breaches

# data[].attributes.subject
NHS top of the list for most serious breaches

# data[].attributes.attachment_link.readable_text
If the principal purposes of criminal law are to punish and rehabilitate criminals and to deter others from offending, why has there been such an explosion of cybercrime over the past few years? Is it because criminal law does not really deter criminals and, if so, could the law be used in better ways to prevent the continued rise of cybercrime?

The Serious Crime Act 2015 received Royal Assent and became law on 3 March 2015. Its provisions include amendments to the Computer Misuse Act 1990, which create new criminal penalties of life imprisonment for unauthorised acts causing serious damage to welfare or security, and 14 years' imprisonment for serious damage to the economy or to the environment. The Serious Crime Act also extends the international reach of the Computer Misuse Act to capture the activities of UK residents committing crimes abroad, and foreign nationals committing crimes within the UK.

This is not the first time that the Computer Misuse Act has been updated - in fact, it has been updated on at least 11 previous occasions over the last 25 years. As a result, the Act provides sanctions against a wide range of cybercrime, including unauthorised access to computer systems and unauthorised acts with the intent of disrupting the use of a computer system.

The Computer Misuse Act is also supported by a range of other legislation, including the Protection from Harassment Act 1997 (that protects against cyber-bullying), and the Wireless Telegraphy Act 2006 (which protects against the interception and disclosure of messages). Together, these provide an adequate range of criminal sanctions with which to prosecute offenders and should have sufficient deterrent effect.

Despite all of this, the latest Ponemon Institute report on cybercrime (the 2014 Cost of Cyber Crime Study) indicates that cybercrimes are occurring more frequently, with an increase of 176 percent in the number of attacks since the study was first conducted in 2010.

It's in the job description!

Crime is generally perpetrated by people who feel comfortable with breaking the law, whether intentionally or reckless of the criminal consequences of their acts, or by people who are ignorant of the law. Additionally, the anonymous nature of the internet, its lack of borders and the opportunity to industrialise the process of committing crime makes cybercrime an efficient, low-risk activity.

Even where international conventions, such as the Budapest Convention on Cybercrime 2001, are established to provide cooperation between national law enforcement agencies, the provisions of these agreements are typically diluted by the need to achieve consensus between the participants. The result is that the criminal law does not operate to effectively prevent cybercrime.

Corporate drivers

Despite the large number of studies conducted on behalf of governments and businesses, there is no consensus on the real cost of cybercrime. Accordingly, taking preventative measures against cybercrime can be seen as an unnecessary cost, business distraction and barrier to business when balanced against the risk of cybercrime occurring and the remedial costs. Cyber-specific insurance can also be purchased to reinforce the credibility of such a strategy, and its appropriateness is further reinforced when large corporations do not seem to suffer significant or lasting reputational harm or significant regulatory fines.

Consequently, preventative measures against cybercrime seem to be seen as an issue that can be resolved by technology, ignoring, for example, its social engineering dimension.

Public sympathy for companies that are the victim of cybercrime will eventually wane, particularly where theft of personal data leads to identify fraud. Regulators can also be expected to take an increasingly stringent view of the appropriateness of the technological and organisational measures taken by businesses to protect information, and shareholders will take more interest where brand image is damaged and share values are reduced. These are medium-term drivers for change, where there is a more immediate need to drive good corporate behaviour.

An alternative approach

A more effective approach to collective security would be for government to encourage good corporate behaviour through the use of tax credits or similar schemes that provide a commercial incentive. The UK Government's Cyber Essential's initiative aims to achieve collective security for government by requiring all suppliers to the public sector to meet certain technological standards. This operates like a kitemark, but it does not do enough to encourage wide-scale adoption in the private sector.

The internet is a commercial vehicle controlled by business, and businesses are guided by the drive to be profitable, or at least to reduce overheads. Costs, like insurance, are a necessity that doesn't deliver profit, which includes expenditure on cyber-security. Public or shareholder demand will eventually require business to adopt more stringent cyber-security measures, but this will take time.

The creation of more criminal sanctions will not change the legitimate activities of business - but offering a financial incentive might, and spending on more security might also generate more economic growth in the process!
Stewart James (pictured) is a Partner at Ashfords LLP

# data[].attributes.attachment_link.title
Would financial incentives stop the rise of cybercrime?

# data[].attributes.attachment_link.description
If the principal purposes of criminal law are to punish and rehabilitate criminals and to deter others from offending, why has there been such an explosion of cybercrime over the past few years? Is it because criminal law does not really deter criminals and, if so, could the law be used in better ways to prevent the continued rise of cybercrime?

# data[].attributes.attachment_link.readable_text
For the first time, Big Brother Watch has uncovered the true extent to which Police abuse their access to confidential databases.

This report follows allegations that a number of journalists paid the Police in order to receive privileged information.

Between 2007 and 2010:

243 Police officers and staff received criminal convictions for breaching the Data Protection Act (DPA).

98 Police officers and staff had their employment terminated for breaching the DPA.

904 Police officers and staff were subjected to internal disciplinary procedures for breaching the DPA.

The full report can be found here.

Posted in Press Office, Research and reports, Uncategorised

# data[].attributes.attachment_link.title
Police Databases: How more than 900 staff abused their access

# data[].attributes.attachment_link.description
For the first time, Big Brother Watch has uncovered the true extent to which Police abuse their access to confidential databases. This report follows allegations that a number of journalists paid the Police in order to receive privileged information. Between 2007 and 2010: 243 Police officers and staff received criminal convictions for breaching the Data Protection Act (DPA).

# data[].attributes.attachment_link.title
World's Biggest Data Breaches & Hacks - Information is Beautiful

# data[].attributes.attachment_link.description
Data visualization of the world biggest data breaches, leaks and hacks. Constantly updated. Powered by VizSweet.

# data[].attributes.attachment_link.readable_text
Recruiters across the UK are warning too many young people are risking their career opportunities because of what they post on social network sites.

The Recruitment Society and The Chartered Institute of Personnel and Development (CIPD) say most employers now search job candidates online.

Katerina Rudiger from the CIPD says it is important to check your privacy settings on sites like Facebook.

"We all have nights out but it is best not to advertise it," she said.

Simon Bracewell from the Recruitment Society oversees the processing of thousands of applications for graduates, interns and apprentices.

He says he has seen more and more worrying cases.

He said: "I have seen so many of them where people have posted naked pictures."

Kelly Doherty called in sick at work for two days. She said: "My boss phoned me up two days later and asked, 'Did I have a nice time?'

"My workmate had grassed me up and all my pictures were over Facebook.

"I should have set my privacy settings."

The Recruitment Society and CIPD are seeing more cases of inappropriate photos or comments which are public on sites like Facebook and Twitter.

Both are warning it is legal for employers to search social media sites.

Provided they do not discriminate on things like race and gender, they can choose not to give you a job based on what they find online.

Both groups also say you need to be careful once in work.

They are concerned some people don't realise they can be sacked if they post negative comments about their company.

Dan, 17, who didn't want to be identified, said he lost out on a job after joking about a cafe chain on Twitter.

He thinks the decision should have been made on his skills.

"It's frustrating I have to be very careful now and can't always say what I really feel," he said.

Dan is now being followed by his prospective university on Twitter.
Follow @BBCNewsbeat on Twitter

# data[].attributes.attachment_link.title
Warning about harming career prospects on social media

# data[].attributes.attachment_link.description
Recruiters across the UK are warning too many young people are risking their career opportunities because of what they post on social network sites. The Recruitment Society and The Chartered Institute of Personnel and Development (CIPD) say most employers now search job candidates online.

# data[].attributes.headline
Police officers fired and disciplined over Facebook posts

# data[].attributes.subject
Police officers fired and disciplined over Facebook posts

# data[].attributes.attachment_link.readable_text
Some 150 police officers have been disciplined, at least two have been fired and seven forced to quit over posting photos or comments on Facebook.

Over the past four years officers used Facebook to harass former partners and ex-colleagues, to comment on others' wives, and to suggest they had beaten up members of the public during protests.

Some even revealed details of police operations, tried to befriend victims of crime, or were caught in inappropriate photographs.

The details, released to the Press Association following a request under the Freedom of Information Act, come as a review into police corruption found there was a "significant blurring" between officers' personal and professional lives on social networking sites which risked damaging the service's reputation.

One officer with the Hampshire force was dismissed without notice in 2009 for posting a racist comment on Facebook, the force said. No other details were released.

The figures, from 41 of the 43 forces in England and Wales, cover between 2008 and 2010, but a second officer was sacked earlier this year for referring to another officer as a "grass" and a "liar" on Facebook and harassing a female colleague.

Seven other officers - two special constables from the Dorset force and one officer from each of Bedfordshire, Cheshire, Essex, North Wales, and South Yorkshire - resigned following complaints, the figures showed.

The South Yorkshire officer resigned following an allegation of improper disclosure of information on Facebook, while others posted inappropriate comments or pictures.

Another officer, Pc Nestor Costa, of Devon and Cornwall Police, was fined three days pay in 2008 after he called for violence against suspects in custody.

Under a video of a youth with a knife being tackled by officers in a police station, he wrote: "Look at this stupid c***, hope he gets a good f****** shoeing in the cells."

In all, a total of 187 complaints were made against officers over their use of Facebook, with nine officers being given final written warnings, 47 given written warnings and one given a formal warning.

A further 88 were subject to management action, received guidance or words of advice, while 32 complaints were either withdrawn, found to be unsubstantiated or led to no further action.

One disciplinary outcome in Leicestershire, following comments made on Facebook, was withheld by the force.

Roger Baker, who led a review into police corruption for Her Majesty's Inspectorate of Constabulary (HMIC), said: "Social networking is seen as a risk by all forces and authorities, but there are limited or inconsistent policies around what is acceptable, what you should do, what you shouldn't do.

"We found a significant blurring between people's professional lives on social networking sites and their private lives which may be in the public domain and private lives which probably should remain extremely private."

The Association of Chief Police Officers (Acpo) said that while the service recognised the widespread benefits of social networking sites, it "also understands the risks relating to compromise, operational effectiveness and reputational damage".

Chief Constable Mike Cunningham, Acpo's lead for professional standards, said: "Whilst officers and staff have a right to privacy and to share opinions and experiences with friends and associates, they should also be aware of the risk they are subject to when they identify themselves as being a member of the service.

"For this reason, forces are revising their existing procedures on information security to include specific reference to the responsible use of social networking sites and are providing clear guidance on acceptable content.

"They are also taking active steps to highlight risks and include awareness training in induction programmes and in wider police officer training."

He went on: "Professional standards departments ensure that officers and staff placing inappropriate comments or pictures are held to account and, depending on the degree of severity, are removed from the service or subject to more educationally-based action to modify awareness and prevent further inappropriate behaviour."

The HMIC review, Without Fear Or Favour: A Review Of Police Relationships, said: "Any lack of clarity felt by staff is not helped by the example set by some senior officers who include what might be considered questionable force-related content or personal opinion in their own messaging."

A study of eight forces found that 3.4% (1,849) of officers and staff using Facebook identified themselves as police employees, of which 2% (43) had posted inappropriate pictures or comments.

One in six officers with a public profile displayed police-related content in their profile picture, such as photos of them in uniform, the study found.

But in one force, which was not identified by HMIC, more than one in eight of its officers with a public profile had posted inappropriate comments or photographs.

These included displays of nudity or partial nudity, offensive and abusive language, and excessive alcohol consumption, the review found.

The inspectors called for ways to monitor officers' use of social media to be explored and consideration should be given to "ensuring that all police officers and staff understand the boundaries within which to operate on social networking sites - clearly explaining how they relate to professional and personal use".

Belfast Telegraph

# data[].attributes.attachment_link.title
Police officers fired and disciplined over Facebook posts - BelfastTelegraph.co.uk

# data[].attributes.attachment_link.description
Some 150 police officers have been disciplined, at least two have been fired and seven forced to quit over posting photos or comments on Facebook. Over the past four years officers used Facebook to harass former partners and ex-colleagues, to comment on others' wives, and to suggest they had beaten up members of the public during protests.

# data[].attributes.body
NOTTINGHAM NURSE SACKED OVER FACEBOOK PHOTO

# data[].attributes.attachment_link.readable_text
A nurse was dismissed from Nottingham University Hospitals Trust after posting a picture of a patient on Facebook, it has emerged.

The case was one of 29 reported breaches of patient confidentiality at the trust over the past three years.

The figures from July 2008 to July 2011 were obtained under a Freedom of Information Act request from campaign group Big Brother Watch.

The trust said it took any breach of data protection extremely seriously.

A total of eight members of staff were dismissed over the breaches.

'Clear message'

Out of 29 the reported incidents, nine had no case to answer while the other 20 were investigated.

Peter Homa, chief executive of the trust, said: "We fully investigate all claims - and where there is found to be a serious breach of confidentiality, we have dismissed the member of staff involved.

"This is a clear message we give to all our employees.

"Since 2010 we have carried out a major campaign across both our hospitals to actively encourage staff and patients to report all suspected breaches of data protection and patient confidentiality.

"This saw a huge increase in reports at the time, but has since brought about a reduction in the number of breaches in our trust over the last year as we drive home the importance of keeping data secure."

The trust runs Nottingham City Hospital and the Queen's Medical Centre.

The highest number of reported breaches was found at NHS Lothian. Cumbria Teaching PCT had 39 and NHS Fife had 30.

A total of 420 trusts were surveyed but 74 did not respond.

# data[].attributes.attachment_link.description
A nurse was dismissed from Nottingham University Hospitals Trust after posting a picture of a patient on Facebook, it has emerged. The case was one of 29 reported breaches of patient confidentiality at the trust over the past three years.