Finham Park Multi Academy Trust
Disclosed Dec 7, 20232 years agoConfirmed
UK ICO reprimand for security failings
Finham Park Multi Academy Trust have been issued a Reprimand in respect of Articles 5 (1) (f) and 32 (1) (b). An unauthorised third party utilised compromised credentials to access and encrypt Finham Park’s systems. 1843 UK Data Subjects were affected by the incident, and the ICO’s investigation found Finham Park did not have adequate account lockout or password policies in place.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Dec 7, 2023 |
| Attack | Vendor breach |
| Data exposed | Not stated |
| Sector | Education · GB |
| Status | Confirmed |
| Lawsuit or fine | UK ICO reprimand (2023-12-07) |
Sources
| Source | |
|---|---|
| UK ICO reprimand: Finham Park Multi Academy Trustico.org.uk · Regulator | Regulator |
Notices filed
| Where | Filed | People |
|---|---|---|
| UK ICOregulator:GB | Dec 7, 2023 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (UK ICO), confirmed by UK ICO. Record counts are as reported. Not legal advice.