Breachesby GlyphDPP Law
Disclosed Apr 14, 2025Settled
Law firm's data published on dark web after 2022 attack; ICO fine of GBP 60,000
In June 2022 attackers entered Merseyside law firm DPP Law through a rarely used admin account without MFA, disrupted its systems for over a week and stole highly sensitive, legally privileged client data later posted on the dark web. The ICO fined the firm GBP 60,000, also citing late breach notification.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Apr 14, 2025 |
| Discovered | Jun 2022 |
| Attack | Hacking |
| Data exposed | OtherNames |
| Sector | Legal and services · GB |
| Status | Settled |
| Lawsuit or fine | GBP 60,000 ICO fine (April 2025) (about $80K) |
Sources
Notices filed
History of this record
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.