Story perspectives

ICO Reprimands Ogi Networks After Ransomware Breach

By Drooid · Oct 21, 2026, 2:12 PM UTC · How we work

Summary

Story summary

The ICO reprimanded Ogi Networks Limited and Data Cymru for a ransomware attack that exploited a test account.
Hackers used the ‘Test2’ account with password ‘Password1’ to steal 42 GB of data and encrypt 182.7 GB.
The breach exposed personal data of 3,300 mostly children.
ONL and Data Cymru added multi-factor authentication after signing a data-processing contract on 30 April 2025 and now conduct regular account reviews.

History

Historical Context

The May 12 2017 WannaCry ransomware, spread via the NSA-originated EternalBlue exploit, crippled NHS hospitals and firms in 150 countries, infecting roughly 300,000 machines and causing up to $4 billion loss. The outbreak spurred the UK’s National Cyber Security Centre and regulators to push patching, MFA and continuous account reviews, which now frame the April 30 2025 Ogi Networks/Data Cymru breach that leaked 42 GB.

1 of 2

Story summary

The ICO reprimanded Ogi Networks Limited and Data Cymru for a ransomware attack that exploited a test account.
Hackers used the ‘Test2’ account with password ‘Password1’ to steal 42 GB of data and encrypt 182.7 GB.
The breach exposed personal data of 3,300 mostly children.
ONL and Data Cymru added multi-factor authentication after signing a data-processing contract on 30 April 2025 and now conduct regular account reviews.

1 / 2