A 2020 cyberattack on South Staffordshire Water exposed the personal data of 633,887 people, with over 4.1 terabytes of information — including bank details and National Insurance numbers — ending up on the dark web. The breach went undetected for 20 months.
Victims like Chris Durham, 53, had phones fraudulently taken out in his name and spent months fighting to recover £60 monthly charges he never authorized. Another customer, Nigel Calladine, 75, had to change his email and bank accounts entirely after six months of phishing attacks.
The ICO fined South Staffordshire £963,900. Customers say the fine doesn't go far enough.
Source: BBC News