The ICO’s First Ransomware Monetary Penalty Notice: Key Takeaways | Orrick, Herrington & Sutcliffe LLP

On March 10 2022, the UK Information Commissioner’s Office (ICO) handed down its first Monetary Penalty Notice in respect of a ransomware attack and data exfiltration incident under the UK General Data Protection Regulation (GDPR) against the criminal defense firm Tuckers who suffered from a…