Exposed: Woeful security at UK criminal records office that led to sensitive data leak

A UK criminal records office (ACRO) suffered a sensitive data leak after failing to patch its CMS or monitor security alerts, and still cannot confirm whether the information was exfiltrated.

Woeful security at the UK's criminal records office (ACRO) led to a sensitive data leak. Staff failed to patch the content management system (CMS) and ignored security alerts. ACRO still cannot determine whether any information was exfiltrated.