GRS
Disclosed Nov 14, 20232 years agoConfirmed
UK ICO reprimand for security failings
The Information Commissioner (the Commissioner) issues a reprimand to GRS (Roadstone) Limited in respect of infringements of Article 32 (1) (b) and Article 32 (1) (d) of the UK GDPR. The organisation did not have appropriate security measures in place, which resulted in an unauthorised Threat Actor being able to exfiltrate the individual personal data of current and former employees.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Nov 14, 2023 |
| Attack | Insider |
| Data exposed | Not stated |
| Sector | Other · GB |
| Status | Confirmed |
| Lawsuit or fine | UK ICO reprimand (2023-11-14) |
Sources
| Source | |
|---|---|
| UK ICO reprimand: GRS (Roadstone) Limitedico.org.uk · Regulator | Regulator |
Notices filed
| Where | Filed | People |
|---|---|---|
| UK ICOregulator:GB | Nov 14, 2023 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (UK ICO), confirmed by UK ICO. Record counts are as reported. Not legal advice.