Scottish Govt Suffers Potentially Widening Data Breach at Prosecutor's Office

A data breach at Scotland's Crown Office and Procurator Fiscal Service (COPFS) has exposed the personal information of approximately 300 employees, potentially impacting a wider number of Scottish government agencies involved in a data maturity assessment program. The breach stemmed from a third-party vendor, Data Orchard, which administers the assessments as part of Scotland’s Data Maturity Programme. While the breach initially involved employee names, roles, and email addresses, the risk remains significant due to the potential for targeted phishing attacks leveraging this reconnaissance data. The incident highlights the challenges of managing vendor risk and the need for continuous monitoring beyond initial compliance assessments.