South Staffordshire Plc and South Staffordshire Water
Disclosed May 7, 20264 months agoSettled
UK ICO fine for security failings
The Information Commissioner’s Office (ICO) has imposed a fine of £963,900 on South Staffordshire Plc & South Staffordshire Water Plc for the infringement of Article 5(1)(f) and Article 32(1) of the UK General Data Protection Regulation. This enforcement action follows a cyber incident in which personal data relating to approximately 633,887 UK data subjects was exfiltrated.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | May 7, 2026 |
| Attack | Not stated |
| Data exposed | Not stated |
| Sector | Energy · GB |
| Status | Settled |
| Lawsuit or fine | UK ICO fine of £963,900 (2026-05-07) |
Sources
| Source | |
|---|---|
| UK ICO fine: South Staffordshire Plc and South Staffordshire Water Plcico.org.uk · Regulator | Regulator |
Notices filed
| Where | Filed | People |
|---|---|---|
| UK ICOregulator:GB | May 7 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (UK ICO), confirmed by UK ICO. Record counts are as reported. Not legal advice.
Everything about South Staffordshire Plc and South Staffordshire Water