[Law] Former RAC employees receive suspended sentence for data theft

Summary: Two former employees of the RAC have been sentenced for unlawfully copying and selling sensitive personal information, affecting over 29,500 individuals. The data theft was uncovered through new security measures implemented by the company, leading to the discovery of the unauthorized access and subsequent sale of the information.

Threat Actor: Debbie Okparavero and Maliha Islam | Debbie Okparavero, Maliha Islam

Key Point :

  • Both individuals were customer service specialists at RAC’s call center.
  • The unauthorized access to personal data was flagged by newly installed security monitoring software.
  • Stolen information was shared via WhatsApp and sold to a third party.
  • Each received a suspended six-month prison sentence and was ordered to complete 150 hours of community service.


Original Source: https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2024/10/criminal-record-and-suspended-prison-sentence-handed-to-former-rac-employees/

Cyber Law and Cybercrime Investigation Blog: Immuniweb