Great Britain: Interserve fined more than £4 million following employee personal data leak

The events in question took place between 30 March and 02 May 2020. At that time, an employee of the construction group forwarded a ‘phishing’ email to a colleague, which Interserve’s security system neither detected, nor blocked. The employee opened the email and downloaded its contents, resulting in malware being installed onto the employee’s workstation. At that moment the company’s anti-virus system functioned and quarantined the malware but Interserve did not then thoroughly investigate the suspicious activity further.…