UK’s Data Protection Regulator Fines a UK SaaS Provider ~$4 Million Following a Ransomware Incident
By EsqSocial Corporation 07/04/25
On March 26, 2025, the UK data protection regulator (the Information Commissioner’s Office (“ICO”)) fined Advanced Computer Software Group Ltd (“Advanced”) £3.07 million (approximately $4 million). In 2022, Advanced suffered a ransomware incident that put the personal data of 79,404 people at risk. In its penalty notice, the ICO found that Advanced failed to implement appropriate technical and organisational measures, as required by UK GDPR. This is one of only a handful of fines imposed by the...
By: Alston & Bird