DPP Law
Disclosed Apr 14, 20251 year agoSettled
Law firm's data published on dark web after 2022 attack; ICO fine of GBP 60,000
In June 2022 attackers entered Merseyside law firm DPP Law through a rarely used admin account without MFA, disrupted its systems for over a week and stole highly sensitive, legally privileged client data later posted on the dark web. The ICO fined the firm GBP 60,000, also citing late breach notification.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Apr 14, 2025 |
| Discovered | Jun 2022 |
| Attack | Hacking |
| Data exposed | Other, Names |
| Sector | Legal and services · GB |
| Status | Settled |
| Lawsuit or fine | GBP 60,000 ICO fine (April 2025) (about $80K) |
Sources
| Source | |
|---|---|
| Law firm fined GBP 60,000 following cyber attackico.org.uk · Regulator | Regulator |
| ICO: DPP Law Ltdico.org.uk · Regulator | Regulator |
Notices filed
History of this record
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.