10/12/2026
The UK's criminal records office was reprimanded by the privacy regulator in August. Its antivirus had flagged a password-stealing tool four times and nobody read the alerts. An attacker had access for about seven months, and up to 10,920 people may have been affected. An alert nobody reads is worth nothing. Decide who reviews yours, how they escalate, and where they record what they checked.
Unread antivirus alerts and an unpatched content management system exposed Britain's ACRO to three separate data breaches, according to a reprimand notice.