- Enforcing jurisdiction
- United Kingdom · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
Optionis Group Limited – Reprimand (United Kingdom, 2023)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Optionis Group Limited faced a reprimand after a ransomware attack leaked personal data. The company lacked important security measures, like multi-factor authentication, which could have prevented the breach. This incident serves as a warning for businesses to strengthen their cybersecurity.
What happened
A ransomware attack led to the exfiltration of personal data from Optionis Group Limited.
Who was affected
Individuals whose personal data was compromised during the ransomware attack.
What the authority found
The Information Commissioner's Office reprimanded the company for failing to implement adequate security measures under UK GDPR.
Why this matters
This case highlights the critical need for businesses to adopt strong cybersecurity practices. Companies should review their security policies to protect against similar attacks.
Source checks
Linked-source text retrieved.
Automated check recorded — 16 October 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The data controller suffered a ransomware attack, which resulted in the exfiltration of personal data. A reprimand was issued in respect of specific infringements of the UK GDPR, which include lack of multi-factor authentication, an inadequate account lockout policy, and no clear Bring Your Own Device policy.
Outcome
Reprimand
A formal reprimand: the DPA found a violation and issued a formal censure.
Related Enforcement Actions (0)
No other enforcement actions found for Optionis Group Limited in UK
This is the only recorded action for this entity in this jurisdiction.
Details
Decision Date
10 October 2023
Authority
Information Commissioner's Office
About this data
Cite as: Cookie Fines. Optionis Group Limited - United Kingdom (2023). Retrieved from cookiefines.eu
Last updated: