{ "type": "bundle", "id": "bundle--7753645b-cb6e-57da-8690-d56d206f313c", "objects": [ { "type": "identity", "spec_version": "2.1", "id": "identity--db6893ff-2c52-5348-83ec-aa49bc5f5758", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "org:02249821-959d-4acb-b2cd-957bde1c14ce", "name": "South Staffordshire Water Plc", "identity_class": "organization" }, { "type": "identity", "spec_version": "2.1", "id": "identity--ffaa61ba-a8f5-5822-861f-3123617d2104", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "org:88eb0554-6360-4d0b-89e1-60b1639dc009", "name": "South Staffordshire Plc", "identity_class": "organization" }, { "type": "incident", "spec_version": "2.1", "id": "incident--bf71de01-0777-5712-85fa-1598c045d0f5", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "inc:ca88e1c1-dad4-4150-8699-16cba48ae590", "name": "South Staffordshire 2020–2022 cyberattack" }, { "type": "incident", "spec_version": "2.1", "id": "incident--c1f9f721-d66f-5575-88e4-afd7cd8acbcc", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "brh:4050bfeb-131f-486e-8ce2-93c5a09c3283", "name": "South Staffordshire cyberattack and data breach" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--060c0cf4-fbe4-5662-8638-371282fb18a9", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "clm:d1343423-90a1-442e-a0bd-3430a7dbb420", "relationship_type": "affected-organization", "source_ref": "x-ally-legal-proceeding--a5c010b3-c942-56cb-8469-8feeb0ce491a", "target_ref": "identity--db6893ff-2c52-5348-83ec-aa49bc5f5758", "confidence": 100, "external_references": [ { "source_name": "Information Commissioner's Office", "url": "https://ico.org.uk/action-weve-taken/enforcement/2026/05/south-staffordshire-plc-and-south-staffordshire-water-plc/", "external_id": "cit:d7ebdbb3-09f7-4aa9-ae77-79a946e608c0", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:ba2a8c0d9242e51f355dee8342eda675626e591f6f84481556935b43691bd3dc" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2b0ea762-f9e9-5974-8fe4-543acd2808f4", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "clm:66a14850-1c6d-4d7c-bc02-9dc67b5506a4", "relationship_type": "affected-organization", "source_ref": "incident--bf71de01-0777-5712-85fa-1598c045d0f5", "target_ref": "identity--db6893ff-2c52-5348-83ec-aa49bc5f5758", "confidence": 100, "external_references": [ { "source_name": "Information Commissioner's Office", "url": "https://ico.org.uk/action-weve-taken/enforcement/2026/05/south-staffordshire-plc-and-south-staffordshire-water-plc/", "external_id": "cit:8768c93f-6f82-4da5-b3ad-75b1d13445da", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:ba2a8c0d9242e51f355dee8342eda675626e591f6f84481556935b43691bd3dc" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6240b69f-7e40-5ad6-8913-c29d69ac426e", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "clm:200f751c-6312-4b5a-a10f-1be2644593c1", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--0539c9da-6a83-5214-8352-a7a8da01c7a5", "target_ref": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07", "confidence": 100, "external_references": [ { "source_name": "Information Commissioner's Office", "url": "https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/05/fine-of-nearly-1m-issued-against-south-staffordshire-plc-and-south-staffordshire-water-plc/", "external_id": "cit:7aa2a2d9-7e42-4cb1-9323-fc82628363ef", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:a9547f6464a2c51946c7f2ab07243213ee194eaf8b0c5b124ba49fdf9bda5091" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--62bf9bcb-dd19-5b28-8bba-aaff07666f5d", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "clm:699ac8a8-d4b3-40d5-a728-27ed660461ad", "relationship_type": "subsidiary-of", "source_ref": "identity--db6893ff-2c52-5348-83ec-aa49bc5f5758", "target_ref": "identity--ffaa61ba-a8f5-5822-861f-3123617d2104", "confidence": 100, "external_references": [ { "source_name": "Information Commissioner's Office", "url": "https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/05/fine-of-nearly-1m-issued-against-south-staffordshire-plc-and-south-staffordshire-water-plc/", "external_id": "cit:67fb999b-3aea-44bf-85da-44b7a272684d", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:a9547f6464a2c51946c7f2ab07243213ee194eaf8b0c5b124ba49fdf9bda5091" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6abe3f14-761d-5b73-872e-60be75cec030", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "clm:3eac6362-fb31-41bd-9ade-0eec7a0f5510", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--0539c9da-6a83-5214-8352-a7a8da01c7a5", "target_ref": "x-ally-data-category--145a20ea-fecc-5f7d-8452-8f571359a568", "confidence": 100, "external_references": [ { "source_name": "Information Commissioner's Office", "url": "https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/05/fine-of-nearly-1m-issued-against-south-staffordshire-plc-and-south-staffordshire-water-plc/", "external_id": "cit:8a7d0960-609c-49fd-a9b2-c99b738e1c73", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:a9547f6464a2c51946c7f2ab07243213ee194eaf8b0c5b124ba49fdf9bda5091" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--71aa1f05-c9aa-53db-885b-9b015cbe0d26", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "clm:961f8eae-5f96-4a09-8c41-40361a24f320", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--0539c9da-6a83-5214-8352-a7a8da01c7a5", "target_ref": "x-ally-data-category--05e2e501-a627-5fd9-8973-d3d458231f93", "confidence": 100, "external_references": [ { "source_name": "Information Commissioner's Office", "url": "https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/05/fine-of-nearly-1m-issued-against-south-staffordshire-plc-and-south-staffordshire-water-plc/", "external_id": "cit:f4fcf550-fa56-4370-b545-da5a905e11d3", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:a9547f6464a2c51946c7f2ab07243213ee194eaf8b0c5b124ba49fdf9bda5091" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--73d0ae0b-4dea-5f56-81d3-8bd5a6d2f2dc", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "clm:c7c021e1-f1aa-437f-8886-253674be2faf", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--0539c9da-6a83-5214-8352-a7a8da01c7a5", "target_ref": "x-ally-data-category--52b3cbb9-715e-51b4-8264-46d4b1a49ec4", "confidence": 100, "external_references": [ { "source_name": "Information Commissioner's Office", "url": "https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/05/fine-of-nearly-1m-issued-against-south-staffordshire-plc-and-south-staffordshire-water-plc/", "external_id": "cit:3c3ca00c-2796-4003-998a-6dd7277f3076", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:a9547f6464a2c51946c7f2ab07243213ee194eaf8b0c5b124ba49fdf9bda5091" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7aecd19c-7826-507f-8bb1-bef27940c455", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "clm:0b4861aa-56f1-4849-a76d-315509fa1025", "relationship_type": "affected-organization", "source_ref": "x-ally-legal-proceeding--a5c010b3-c942-56cb-8469-8feeb0ce491a", "target_ref": "identity--ffaa61ba-a8f5-5822-861f-3123617d2104", "confidence": 100, "external_references": [ { "source_name": "Information Commissioner's Office", "url": "https://ico.org.uk/action-weve-taken/enforcement/2026/05/south-staffordshire-plc-and-south-staffordshire-water-plc/", "external_id": "cit:28903a58-e9fb-4d01-b83a-66aaeb4297bb", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:ba2a8c0d9242e51f355dee8342eda675626e591f6f84481556935b43691bd3dc" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8321ec43-7c04-57e7-8ed1-4e0b3a037373", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "clm:2ef7e5a2-fbbb-4634-9821-c24861c50e38", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--0539c9da-6a83-5214-8352-a7a8da01c7a5", "target_ref": "x-ally-data-category--8a4b38eb-4642-521b-8ce5-b7722d526458", "confidence": 100, "external_references": [ { "source_name": "Information Commissioner's Office", "url": "https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/05/fine-of-nearly-1m-issued-against-south-staffordshire-plc-and-south-staffordshire-water-plc/", "external_id": "cit:b83390d2-0ca5-4632-9e24-223e7ac6131c", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:a9547f6464a2c51946c7f2ab07243213ee194eaf8b0c5b124ba49fdf9bda5091" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--869dcb37-2245-5178-8110-1e97cd0f8c08", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "clm:636c2b89-8d42-4d8e-abf3-261ecddfdcde", "relationship_type": "located-in", "source_ref": "x-ally-data-exposure--0539c9da-6a83-5214-8352-a7a8da01c7a5", "target_ref": "x-ally-jurisdiction--b0b7c3ef-baa6-53e3-8084-2365e04b7d97", "confidence": 100, "external_references": [ { "source_name": "Information Commissioner's Office", "url": "https://ico.org.uk/action-weve-taken/enforcement/2026/05/south-staffordshire-plc-and-south-staffordshire-water-plc/", "external_id": "cit:77b1c303-d895-4d61-9fdf-654b94594cb1", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:ba2a8c0d9242e51f355dee8342eda675626e591f6f84481556935b43691bd3dc" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b6dd08c9-5d3d-5ab0-81e4-382455715b35", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "clm:96d83e76-e1a4-41e6-94e1-b95cf7d581b3", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--0539c9da-6a83-5214-8352-a7a8da01c7a5", "target_ref": "x-ally-data-category--ff2c8174-4feb-535f-8a4d-be23ee26eff2", "confidence": 100, "external_references": [ { "source_name": "Information Commissioner's Office", "url": "https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/05/fine-of-nearly-1m-issued-against-south-staffordshire-plc-and-south-staffordshire-water-plc/", "external_id": "cit:d1cf88ae-5752-4eea-998c-c4c7d3d26bdd", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:a9547f6464a2c51946c7f2ab07243213ee194eaf8b0c5b124ba49fdf9bda5091" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ba529c74-7183-5467-86aa-2f4a21c3e045", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "clm:d3ea41cb-66a2-46b7-b9c3-88975816e020", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--0539c9da-6a83-5214-8352-a7a8da01c7a5", "target_ref": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231", "confidence": 100, "external_references": [ { "source_name": "Information Commissioner's Office", "url": "https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/05/fine-of-nearly-1m-issued-against-south-staffordshire-plc-and-south-staffordshire-water-plc/", "external_id": "cit:7106be80-bd97-4c94-8b61-0fb202e30fed", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:a9547f6464a2c51946c7f2ab07243213ee194eaf8b0c5b124ba49fdf9bda5091" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c66fe87c-6404-5dd7-8794-0fbd5f6f976a", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "clm:09482bd5-a9ee-469f-bfdc-8b5ac774a26c", "relationship_type": "affected-organization", "source_ref": "incident--bf71de01-0777-5712-85fa-1598c045d0f5", "target_ref": "identity--ffaa61ba-a8f5-5822-861f-3123617d2104", "confidence": 100, "external_references": [ { "source_name": "Information Commissioner's Office", "url": "https://ico.org.uk/action-weve-taken/enforcement/2026/05/south-staffordshire-plc-and-south-staffordshire-water-plc/", "external_id": "cit:d101dfa1-12a0-4b4c-aecd-9a4c63d4cb27", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:ba2a8c0d9242e51f355dee8342eda675626e591f6f84481556935b43691bd3dc" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dbc0e652-07d5-5eb7-853a-c3ed3d543bee", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "clm:3eed4e24-21b9-4de2-968f-552b722a5dab", "relationship_type": "resulted-in", "source_ref": "incident--bf71de01-0777-5712-85fa-1598c045d0f5", "target_ref": "x-ally-data-exposure--0539c9da-6a83-5214-8352-a7a8da01c7a5", "confidence": 100, "external_references": [ { "source_name": "Information Commissioner's Office", "url": "https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/05/fine-of-nearly-1m-issued-against-south-staffordshire-plc-and-south-staffordshire-water-plc/", "external_id": "cit:b6c5e0f3-174a-4bfe-bad0-377ffe29ec97", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:a9547f6464a2c51946c7f2ab07243213ee194eaf8b0c5b124ba49fdf9bda5091" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--edc43260-8587-5045-8ee0-e940d95cd1e5", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "clm:ff1f5cf5-b4c7-4b00-823a-913ca496d6d9", "relationship_type": "resulted-in", "source_ref": "incident--bf71de01-0777-5712-85fa-1598c045d0f5", "target_ref": "x-ally-notification--f7e9a7f4-31dc-5e3d-8481-0564691ebf5c", "confidence": 100, "external_references": [ { "source_name": "Information Commissioner's Office", "url": "https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/05/fine-of-nearly-1m-issued-against-south-staffordshire-plc-and-south-staffordshire-water-plc/", "external_id": "cit:4caa9b53-a648-4676-a795-660acf51775f", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:a9547f6464a2c51946c7f2ab07243213ee194eaf8b0c5b124ba49fdf9bda5091" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f675f4fa-01cf-52fe-8b08-23f4097dc805", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "clm:48ebd442-3272-42b1-93e4-57ef513be09d", "relationship_type": "exposed-data-category", "source_ref": "x-ally-data-exposure--0539c9da-6a83-5214-8352-a7a8da01c7a5", "target_ref": "x-ally-data-category--f2ba712c-6d01-516a-821c-c80184970da1", "confidence": 100, "external_references": [ { "source_name": "Information Commissioner's Office", "url": "https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/05/fine-of-nearly-1m-issued-against-south-staffordshire-plc-and-south-staffordshire-water-plc/", "external_id": "cit:a53116bb-608b-4ef8-8d2b-05df05ec864b", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:a9547f6464a2c51946c7f2ab07243213ee194eaf8b0c5b124ba49fdf9bda5091" } ] }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--047a062c-6d0c-531b-8d87-c8975ba9071b", "created": "2026-08-09T18:00:00Z", "modified": "2026-08-09T18:00:00Z", "x_ally_original_id": "clm:9a3ea0ff-b02c-48a8-a053-cb4fb64dcadb", "confidence": 95, "external_references": [], "x_ally_claim_object": { "kind": "iri", "value": "https://attack.mitre.org/techniques/T1566/001/" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--1d01695a-12ab-50fa-82f1-fb6a3764fde5", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "clm:f246501e-0bed-484c-acf9-50a33d454f36", "confidence": 100, "external_references": [ { "source_name": "Information Commissioner's Office", "url": "https://ico.org.uk/action-weve-taken/enforcement/2026/05/south-staffordshire-plc-and-south-staffordshire-water-plc/", "external_id": "cit:963fd580-3ea0-4493-bc14-48252d606a45", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:ba2a8c0d9242e51f355dee8342eda675626e591f6f84481556935b43691bd3dc" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "The ICO imposed a £963,900 monetary penalty for infringements of UK GDPR Articles 5(1)(f) and 32(1)." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--2231aebe-f61a-54c8-81a0-44b63fef80d6", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "clm:3d7cf946-1620-4552-b98d-798e84ad3227", "confidence": 100, "external_references": [ { "source_name": "Information Commissioner's Office", "url": "https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/05/fine-of-nearly-1m-issued-against-south-staffordshire-plc-and-south-staffordshire-water-plc/", "external_id": "cit:2195852a-aa40-45a6-8bb0-9b4335855ff9", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:a9547f6464a2c51946c7f2ab07243213ee194eaf8b0c5b124ba49fdf9bda5091" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "The ICO found inadequate monitoring and logging, with only 5% of the IT environment monitored." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--2eb5180f-46c2-5a47-8a6a-2bb84fc6e7cc", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "clm:d1777e4a-fd85-405d-8faf-3593de8a4449", "confidence": 100, "external_references": [ { "source_name": "Information Commissioner's Office", "url": "https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/05/fine-of-nearly-1m-issued-against-south-staffordshire-plc-and-south-staffordshire-water-plc/", "external_id": "cit:4e6ab755-241b-4b4b-be30-3afc4367dc8b", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:a9547f6464a2c51946c7f2ab07243213ee194eaf8b0c5b124ba49fdf9bda5091" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Between August and November 2022, South Staffordshire detected that more than 4.1 terabytes of data had been published on the dark web." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--3d8fea96-ebde-5a6e-8024-ab01d3d5f180", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "clm:2a22a6a4-ee1c-418b-9f03-e8f7e50a7a8b", "confidence": 100, "external_references": [ { "source_name": "Information Commissioner's Office", "url": "https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/05/fine-of-nearly-1m-issued-against-south-staffordshire-plc-and-south-staffordshire-water-plc/", "external_id": "cit:6388b8c7-fdab-4a75-a339-90db62ba61cf", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:a9547f6464a2c51946c7f2ab07243213ee194eaf8b0c5b124ba49fdf9bda5091" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "The final penalty reflected a 40% reduction after an early admission; South Staffordshire agreed to pay without appeal." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--4d696eba-118d-5f8f-81a5-2abbfe306276", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "clm:50b8010a-3060-453e-bf70-7f626f10af32", "confidence": 100, "external_references": [ { "source_name": "Information Commissioner's Office", "url": "https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/05/fine-of-nearly-1m-issued-against-south-staffordshire-plc-and-south-staffordshire-water-plc/", "external_id": "cit:6c94da68-1c9c-42de-a568-95b5dae40cda", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:a9547f6464a2c51946c7f2ab07243213ee194eaf8b0c5b124ba49fdf9bda5091" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "The ICO found inadequate vulnerability management, including unpatched critical systems and no regular internal or external security scans." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--5889eb05-fbb3-5d5b-8eb2-503f6fc70608", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "clm:bf1bc334-a3f0-4614-83fc-f94ce2ee3508", "confidence": 100, "external_references": [ { "source_name": "Information Commissioner's Office", "url": "https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/05/fine-of-nearly-1m-issued-against-south-staffordshire-plc-and-south-staffordshire-water-plc/", "external_id": "cit:80a526eb-9b62-41d3-9403-bb8c7c994b3d", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:a9547f6464a2c51946c7f2ab07243213ee194eaf8b0c5b124ba49fdf9bda5091" } ], "x_ally_claim_object": { "kind": "value", "datatype": "integer", "value": 633887, "unit": "individual", "approximate": true } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--74c67ff3-a41a-5f4a-8890-6955a2184e68", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "clm:30a9fbe1-479b-4ba5-8bcf-16506c001580", "confidence": 100, "external_references": [ { "source_name": "Information Commissioner's Office", "url": "https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/05/fine-of-nearly-1m-issued-against-south-staffordshire-plc-and-south-staffordshire-water-plc/", "external_id": "cit:a53a096f-5d84-401d-9f0f-0066870532ad", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:a9547f6464a2c51946c7f2ab07243213ee194eaf8b0c5b124ba49fdf9bda5091" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "In May 2022, the attacker moved through the network and compromised domain-administrator privileges." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--874e88c4-cc45-5d1e-8a9b-d38a98449bef", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "clm:a5b51f7d-ad18-4830-a81f-f933517df2f2", "confidence": 100, "external_references": [ { "source_name": "Information Commissioner's Office", "url": "https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/05/fine-of-nearly-1m-issued-against-south-staffordshire-plc-and-south-staffordshire-water-plc/", "external_id": "cit:6720c030-3155-4f67-8258-dcb9af382650", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:a9547f6464a2c51946c7f2ab07243213ee194eaf8b0c5b124ba49fdf9bda5091" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "The ICO found that limited controls allowed privilege escalation after the initial network foothold." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--908fc7ae-dfcd-5936-8050-2e87ffa21c5b", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "clm:02c9656a-3c15-481b-8bb3-7b70a13240c7", "confidence": 100, "external_references": [ { "source_name": "Information Commissioner's Office", "url": "https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/05/fine-of-nearly-1m-issued-against-south-staffordshire-plc-and-south-staffordshire-water-plc/", "external_id": "cit:bb78732e-b53a-4d8e-9d35-9ea284ddfc84", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:a9547f6464a2c51946c7f2ab07243213ee194eaf8b0c5b124ba49fdf9bda5091" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "A successful phishing email led a recipient to open an attachment that enabled installation of malicious software." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--96fe2902-6330-5097-81da-36fb1523a6de", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "clm:ac55d242-140b-4c00-bc0d-d177c1be59b7", "confidence": 100, "external_references": [ { "source_name": "Information Commissioner's Office", "url": "https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/05/fine-of-nearly-1m-issued-against-south-staffordshire-plc-and-south-staffordshire-water-plc/", "external_id": "cit:8d18fbdf-6f9d-4589-8893-dd156c8d2a75", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:a9547f6464a2c51946c7f2ab07243213ee194eaf8b0c5b124ba49fdf9bda5091" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "Initial access was traced to September 2020 and remained undetected for approximately 20 months." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--b64d431c-c4b5-5500-83a8-13b612e98058", "created": "2026-08-09T18:00:00Z", "modified": "2026-08-09T18:00:00Z", "x_ally_original_id": "clm:c28e6245-d4b0-4edd-bfa2-946870519b5d", "confidence": 95, "external_references": [], "x_ally_claim_object": { "kind": "iri", "value": "https://attack.mitre.org/techniques/T1204/002/" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--be8339c4-420b-53cc-8d01-2b6adab774f7", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "clm:ab691280-4217-4cca-9e39-1716888469ec", "confidence": 100, "external_references": [ { "source_name": "Information Commissioner's Office", "url": "https://ico.org.uk/action-weve-taken/enforcement/2026/05/south-staffordshire-plc-and-south-staffordshire-water-plc/", "external_id": "cit:73ecb697-f7af-4e58-8db0-b644112f1d3c", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:ba2a8c0d9242e51f355dee8342eda675626e591f6f84481556935b43691bd3dc" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2026-05-07" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--c4dec436-572e-5ea9-838c-f89f5abc0e60", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "clm:d68555ff-7920-44ab-b63b-be5c8cb051ea", "confidence": 100, "external_references": [ { "source_name": "Information Commissioner's Office", "url": "https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/05/fine-of-nearly-1m-issued-against-south-staffordshire-plc-and-south-staffordshire-water-plc/", "external_id": "cit:65758564-3939-4a8e-940c-b3a1171500d9", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:a9547f6464a2c51946c7f2ab07243213ee194eaf8b0c5b124ba49fdf9bda5091" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "The ICO found obsolete and unsupported software on some devices, including Windows Server 2003." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--d5cff0ac-9629-557e-8c47-3d7e97e39e67", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "clm:2bdbf073-272b-4122-8d2d-2b8404812f9c", "confidence": 100, "external_references": [ { "source_name": "Information Commissioner's Office", "url": "https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/05/fine-of-nearly-1m-issued-against-south-staffordshire-plc-and-south-staffordshire-water-plc/", "external_id": "cit:27d00fc4-cd1e-4332-ae16-92d71b6b144b", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:a9547f6464a2c51946c7f2ab07243213ee194eaf8b0c5b124ba49fdf9bda5091" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2022-07-15" } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--d64fd78e-cfb9-5688-8342-83543152d854", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "clm:98e7246f-f7de-4b3d-bc50-e0dc9b5915c9", "confidence": 100, "external_references": [ { "source_name": "Information Commissioner's Office", "url": "https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/05/fine-of-nearly-1m-issued-against-south-staffordshire-plc-and-south-staffordshire-water-plc/", "external_id": "cit:f342860b-1c97-40e8-8dab-e38628dda4c3", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:a9547f6464a2c51946c7f2ab07243213ee194eaf8b0c5b124ba49fdf9bda5091" } ], "x_ally_claim_object": { "kind": "value", "datatype": "string", "value": "South Staffordshire discovered an unsuccessfully distributed ransom note on 26 July 2022." } }, { "type": "x-ally-claim", "spec_version": "2.1", "id": "x-ally-claim--f181069b-b768-55ef-89d3-a26ae34fdfae", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "clm:613e0094-98d8-49c9-aaa0-0d4251bfc033", "confidence": 100, "external_references": [ { "source_name": "Information Commissioner's Office", "url": "https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/05/fine-of-nearly-1m-issued-against-south-staffordshire-plc-and-south-staffordshire-water-plc/", "external_id": "cit:e7b272a3-dbea-4a7e-8d91-5f39cf44add1", "x_ally_stance": "supports", "x_ally_snapshot_id": "snp:sha256:a9547f6464a2c51946c7f2ab07243213ee194eaf8b0c5b124ba49fdf9bda5091" } ], "x_ally_claim_object": { "kind": "value", "datatype": "date", "value": "2022-07-24" } }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--05e2e501-a627-5fd9-8973-d3d458231f93", "created": "2026-08-09T01:12:00Z", "modified": "2026-08-09T01:12:00Z", "x_ally_original_id": "dat:7290ba39-bdce-4ff7-8087-56e370cd91c5", "name": "Account credentials" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--145a20ea-fecc-5f7d-8452-8f571359a568", "created": "2026-08-09T01:29:00Z", "modified": "2026-08-09T01:29:00Z", "x_ally_original_id": "dat:ba481af6-f599-410d-9cac-a181cb7ba4a9", "name": "Disability and special-education information" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--52b3cbb9-715e-51b4-8264-46d4b1a49ec4", "created": "2026-08-08T23:23:24Z", "modified": "2026-08-08T23:23:24Z", "x_ally_original_id": "dat:c73589f6-cdb1-4fc7-9675-e1ef42363ada", "name": "Financial account information" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--8a4b38eb-4642-521b-8ce5-b7722d526458", "created": "2026-08-09T01:12:00Z", "modified": "2026-08-09T01:12:00Z", "x_ally_original_id": "dat:74c79a35-6d37-461e-b865-805c619d4231", "name": "Gender information" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07", "created": "2026-08-08T23:12:00Z", "modified": "2026-08-08T23:12:00Z", "x_ally_original_id": "dat:559cf3f5-80c7-45ba-a930-ff0bfa8d17b0", "name": "Names" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--c79f34f3-405d-57d2-8409-98eff3898231", "created": "2026-08-08T23:12:00Z", "modified": "2026-08-08T23:12:00Z", "x_ally_original_id": "dat:5abcee7e-4a37-494a-b6ba-87ff46149be9", "name": "Contact information" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--f2ba712c-6d01-516a-821c-c80184970da1", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "dat:b94b7956-352f-42d4-aa16-f45330b75dda", "name": "National Insurance numbers" }, { "type": "x-ally-data-category", "spec_version": "2.1", "id": "x-ally-data-category--ff2c8174-4feb-535f-8a4d-be23ee26eff2", "created": "2026-08-08T23:12:00Z", "modified": "2026-08-08T23:12:00Z", "x_ally_original_id": "dat:ad54319a-bb47-40fb-be6c-7fd6e2aa1f68", "name": "Dates of birth" }, { "type": "x-ally-data-exposure", "spec_version": "2.1", "id": "x-ally-data-exposure--0539c9da-6a83-5214-8352-a7a8da01c7a5", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "exp:1c2739f1-9c0c-45bc-be5a-bb4835f3387e", "name": "South Staffordshire customer and employee data exposure" }, { "type": "x-ally-jurisdiction", "spec_version": "2.1", "id": "x-ally-jurisdiction--b0b7c3ef-baa6-53e3-8084-2365e04b7d97", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "jur:e78a1940-7da6-4411-9bd6-966965f0ad5a", "name": "United Kingdom" }, { "type": "x-ally-legal-proceeding", "spec_version": "2.1", "id": "x-ally-legal-proceeding--a5c010b3-c942-56cb-8469-8feeb0ce491a", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "lgl:e074b29a-f566-46db-b72d-d1953cf4ba89", "name": "ICO South Staffordshire monetary penalty" }, { "type": "x-ally-notification", "spec_version": "2.1", "id": "x-ally-notification--f7e9a7f4-31dc-5e3d-8481-0564691ebf5c", "created": "2026-08-09T02:11:22Z", "modified": "2026-08-09T02:11:22Z", "x_ally_original_id": "ntf:cddf3cbb-b3e5-4128-bd01-21a138852754", "name": "South Staffordshire report to the ICO" } ] }