Ogi Networks Limited and Data Cymru have been reprimanded by the data watchdog after hackers stole children’s data during a ransomware attack in 2024.
The incident involved an old account protected by the password “Password1”. The account’s security was exploited during the attack, allowing hackers to access data relating to children.
The watchdog’s action places the incident on record as a data protection failure involving both organisations. The supplied information does not specify how many children were affected, what type of data was taken or whether any further enforcement measures were imposed.
Ogi Networks Limited and Data Cymru have been named in connection with the reprimand. No additional response from either organisation is provided in the available material.
The latest known position is that the data watchdog has formally reprimanded the companies following its action over the 2024 ransomware attack.