Rotten Company
Approved evidence

Currys subsidiary Carphone Warehouse received a £400,000 fine for serious data-security failures

Company: Currys plc

Summary

The UK Information Commissioner's Office fined The Carphone Warehouse Limited £400,000 after finding serious failures in the company's protection of customer and employee information. According to the ICO, the company's failure to secure a computer system allowed unauthorized access to personal data belonging to more than three million customers and approximately 1,000 employees. Currys plc was named Dixons Carphone plc when the penalty was imposed, and Carphone Warehouse formed part of that group. This record concerns the subsidiary's documented data-protection failures and does not allege that every Currys business unit participated in the incident. Source / proof: UK Information Commissioner's Office: https://ico.org.uk/media2/migrated/2014675/data-security-trends-pdf.pdf

Record details

Category
Corporate Misconduct
When it happened
2015–2015
Status
Resolved (January 10, 2018)
Severity
high
Added to Rotten Company

Source

No source document is attached to this record. It was approved under our moderation guidelines.