UK Electoral Commission slapped for basic cybersecurity fails

July 31, 2024 at 04:36AM The UK’s Electoral Commission faced a formal reprimand for security failings that led to a cyberattack stealing personal data from 40 million voters. The attack went unnoticed for 13 months due to ineffective patching, default passwords, and weak password management. The ICO noted improvements made post-incident but emphasized the need … Read more

UK govt links 2021 Electoral Commission breach to Exchange server

July 30, 2024 at 08:06AM The U.K.’s Information Commissioner’s Office (ICO) announced that the Electoral Commission was breached in August 2021 due to unpatched Microsoft Exchange vulnerabilities. Around 40 million people’s personal information was compromised, leading to the ICO reprimanding the commission for inadequate security measures. The breach has been linked to state-backed hacking groups … Read more