ico enforcement

On 7 May 2026, the UK Information Commissioner’s Office fined South Staffordshire Plc and South Staffordshire Water Plc £963,900 after a cyber-attack exposed personal data belonging to roughly 633,887 people, including customers, employees, and some vulnerable service users. The headline number...

South Staffordshire Plc, parent of South Staffs Water, has been fined £963,900 by the UK Information Commissioner’s Office on May 11, 2026, after a Cl0p ransomware intrusion first begun in September 2020 went undetected until July 2022 and exposed data on 633,887 people. The headline number is...