ICO (UK) · 7 May 2026
South Staffordshire Plc and South Staffordshire Water Plc
FineGBP963,900≈ €1,120,000Violation found
- Regulator
- ICO (UK)
- Decided
- 7 May 2026
- Country
- United Kingdom
- Sector
- Not given
- Regulator’s reference
- South Staffordshire Plc & South Staffordshire Water Plc
- Fino case number
- 2026/GB/012
What happened
A water supplier was fined £963,900 (€1,113,858.12) for failing to implement appropriate technical and organisational security measures enabling a successful phishing campaign resulting in a data breach and the publication of more than 600,000 data subjects’ data on the dark web.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
The source doesn’t list which GDPR articles were involved.
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2026/GB/012.