Lessons learnt from UK cyber breach enforcement case
On 10 January 2018, the UK ICO issued a fine to Carphone Warehouse amounting to £400,000, close to the maximum ( of £500,000 ) under its current powers within the current (pre-GDPR) law. Carphone Warehouse’s computer systems, which contained significant amounts of personal data including customer and employee records as well as historic transaction details, had been the subject of an external cyber-attack.
Source: Lessons learnt from UK cyber breach enforcement case