The Information Commissioner’s Office (ICO) has warned high street retailer Office after a hacker gained access to over a million customer records.The ICO said the hacker accessed contact details by cracking open an unencrypted database that was due to be phased out.
The information went undetected and the ICO has had Office sign an undertaking to ensure problems associated with the hack are resolved.
In that undertaking, Office CEO Brian McCluskey said that the firm made no reference to retention of data and didn’t give formal data protection training. Both these are now being addressed.
The ICO said that there was no suggestion that the breach went further and no bank details were stored.
