Rotten Company
Approved evidence

Currys plc

Approved Evidence

Added to Rotten Company: 10/8/2026
Conduct/Event period: 2015–2015
Ongoing: No
Resolution status: Resolved
Resolution date: January 10, 2018
misconduct

Currys subsidiary Carphone Warehouse received a £400,000 fine for serious data-security failures

Summary

The UK Information Commissioner's Office fined The Carphone Warehouse Limited £400,000 after finding serious failures in the company's protection of customer and employee information. According to the ICO, the company's failure to secure a computer system allowed unauthorized access to personal data belonging to more than three million customers and approximately 1,000 employees. Currys plc was named Dixons Carphone plc when the penalty was imposed, and Carphone Warehouse formed part of that group. This record concerns the subsidiary's documented data-protection failures and does not allege that every Currys business unit participated in the incident. Source / proof: UK Information Commissioner's Office: https://ico.org.uk/media2/migrated/2014675/data-security-trends-pdf.pdf

Evidence Weight
98.71
Severity: high
Recency Weight: 98.7147517227486
File Weight: 1