Staysure.co.uk Limited (Monetary penalties) [2015] UKICO 2015-20 (24 February 2015)

Date
24 February 2015
Type
Monetary penalties

An online holiday insurance company has been fined £175,000 by the ICO after IT security failings let hackers access customer records. More than 5,000 customers had their credit cards used by fraudsters after the attack on Staysure.co.uk.

Attackers potentially had access to over 100,000 live credit card details, as well as customers' medical details. Credit card CVV numbers, the security number on the signature strips of the cards, were also accessible despite industry rules that they should not be stored at all.