Shell hit by massive data breach

Personal details of 170,000 workers at oil giant Shell have been mailed to campaigners.

Shell logo

A database containing contact details of 170,000 workers of oil giant Royal Dutch Shell has been emailed to campaigning groups opposed to the company's activities.

Seven non-governmental groups including human rights groups and environmental campaigners such as Greenpeace plus anti-Shell campaigning website royaldutchshellplc.com received the database details, which is thought to have been sent by a disaffected former employee of the company.

Many of those groups are upset at the way Shell is purported to be operating in some countries, particularly Nigeria.

The database is thought to contain names, telephone numbers and further details on permanent and contract employees. A lengthy covering letter was attached to the database, purporting to be from more than 100 Shell staff.

Shell has demanded that the activists delete the database. Furthermore, it said it has already launched an investigation, and argues that the breach does not pose a security risk. However, it could provide no further comment at the time of publication.

If it is found that Shell is guilty of an offence under the Data Protection Act, it could be fined.

The Information Commissioner's Office (ICO) the UK's data watchdog said it takes breaches affecting individuals' personal data "very seriously".

A spokesperson for the ICO said: "Shell has notified us of a security breach regarding a significant amount of people's personal details. We are looking into how this data breach occurred and will decide what, if any regulatory action, is required."

Shell if it is found guilty may escape lightly. Fines levied by the ICO for failing to protect against the loss of personal data tend to be under 5,000.

While the data breach may prove costly both financially and in terms of reputation, its timing is ironic. In two months' time, new rules are set to be introduced that may mean companies could be fined up to 500,000 if they are found to be reckless with personal information.

The leaked database is about six months old, implying that ex-employees may have been involved.

Shell cut 5,000 jobs last year.

Featured Resources

B2B under quarantine

Key B2C e-commerce features B2B need to adopt to survive

Download now

The top three IT pains of the new reality and how to solve them

Driving more resiliency with unified operations and service management

Download now

The five essentials from your endpoint security partner

Empower your MSP business to operate efficiently

Download now

How fashion retailers are redesigning their digital future

Fashion retail guide

Download now

Recommended

ICO launches AI risk assessment toolkit for businesses
Information Commissioner

ICO launches AI risk assessment toolkit for businesses

21 Jul 2021
What is the Information Commissioner’s Office (ICO)?
Information Commissioner

What is the Information Commissioner’s Office (ICO)?

15 Jul 2021
MPs turn on the ICO over contact-tracing fiasco
Information Commissioner

MPs turn on the ICO over contact-tracing fiasco

21 Aug 2020

Most Popular

The benefits of workload optimisation
Sponsored

The benefits of workload optimisation

16 Jul 2021
RMIT to be first Australian university to implement AWS supercomputing facility
high-performance computing (HPC)

RMIT to be first Australian university to implement AWS supercomputing facility

28 Jul 2021
Samsung Galaxy S21 5G review: A rose-tinted experience
Mobile Phones

Samsung Galaxy S21 5G review: A rose-tinted experience

14 Jul 2021