Our takeData Cymru and Ogi Networks used the password "Password1" for a decade on an admin account; ransomware hit in Nov 2024, encrypting 182 GB and exposing ~3,300 children's records. The ICO reprimand is a receipt that weak credentials still work when nobody rotates them.Security Resilience desk
Sources (2)
- infosec_mag · infosec_mag
- the420_in · the420_in
What this means for you — Security leader:Review all service accounts and shared credentials for default or weak passwords; enforce MFA, least privilege, and regular audits on third-party providers handling regulated data.
What this means for you — Lean IT orgs:Check any accounts or services from outside providers that handle your data; make sure they are not using simple passwords like Password1 and ask them what steps they are taking to protect children's records.
What this means for you — MSP:Audit all customer environments for legacy service accounts, default credentials, and weak password policies; enforce MFA everywhere and add credential monitoring for public-sector and education clients.
What this means for you — Researcher:Study the full ICO report for timeline, encryption status, and lateral movement details once released; this is a textbook weak-credential + poor segmentation case.