Reprimands · Finance insurance and credit
Optionis Group Limited
No fineReprimands
Root cause
Ransomware
An attacker encrypted or stole data and demanded payment. Usually the visible end of a chain that started with an unpatched service or a stolen credential.
What happened
The data controller suffered a ransomware attack, which resulted in the exfiltration of personal data. A reprimand was issued in respect of specific infringements of the UK GDPR, which include lack of multi-factor authentication, an inadequate account lockout policy, and no clear Bring Your Own Device policy.
Summarised from the notice published by the ICO on 10 October 2023. Read the original notice — it is the authoritative version.
The other end of this
Ransomware crews get in somehow. These are vulnerabilities CISA has tied directly to ransomware campaigns — each one is a live route into an organisation like this one.
- CVE-2026-12569 PTC Windchill and FlexPLM Improper Input Validation Vulnerability PTC · Windchill and FlexPLM
- CVE-2026-35273 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability Oracle · PeopleSoft Enterprise PeopleTools
- CVE-2026-50751 Check Point Security Gateway Improper Authentication Vulnerability Check Point · Security Gateway
- CVE-2026-0257 Palo Alto Networks PAN-OS Authentication Bypass Vulnerability Palo Alto Networks · PAN-OS
- CVE-2026-48027 Nx Console Embedded Malicious Code Vulnerability Nx · Nx Console