Ethical Hacking News
Two former RAC workers have been convicted of selling the personal data of car crash victims and are required to pay £118,000 in restitution. The UK's Information Commissioner's Office has taken action against the duo, Debbie Okparavero and Maliha Islam, for their role in breaching data protection laws.
The UK's Information Commissioner's Office (ICO) has convicted two former RAC employees, Debbie Okparavero and Maliha Islam, of selling personal data from car crash victims. The pair were initially sentenced to suspended prison terms but face increased penalties, with Okparavero now required to pay £89,277.32 within three months. The ICO states that Okparavero and Islam shared approximately 29,500 lines of data via WhatsApp, resulting in significant financial gains for themselves. The RAC took steps to investigate and monitor the pair's activities after detecting suspicious activity on their systems. The case highlights the need for robust cybersecurity measures, employee education programs, and ongoing monitoring to protect sensitive data and prevent similar incidents.
The United Kingdom's Information Commissioner's Office (ICO) has announced that two former employees of the RAC roadside accident business have been convicted and are required to pay a hefty sum in restitution for their role in selling personal data from car crash victims. The two individuals involved, Debbie Okparavero and Maliha Islam, were found guilty of offenses under the Computer Misuse Act 1990 and the Data Protection Act 2018. This case highlights the growing importance of protecting sensitive personal information in the digital age.
In May 2024, Okparavero and Islam were initially sentenced to six-month prison stints, suspended for 18 months, and 150 hours' unpaid work. However, a more recent development has led to increased penalties, with Okparavero now facing repayment of £89,277.32 within three months. If she fails to do so, her punishment will escalate to 18 months in prison.
According to the ICO, Okparavero and Islam were involved in an illicit WhatsApp chat where they discussed the sale of approximately 29,500 lines of data from RAC systems. The scheme involved Okparavero copying data from RAC systems and sharing it with Islam via WhatsApp. The pair's actions resulted in significant financial gains for themselves.
The RAC, a well-known roadside accident service provider based in the UK, took steps to investigate and monitor their activities after detecting suspicious activity on their systems. An investigation revealed that around 30,000 lines of data had been shared between Okparavero and Islam with an unknown third party. This exposed the pair's illicit activities and led to their prosecution.
The ICO has emphasized its commitment to protecting sensitive personal information in the digital age. Chief Investigator at the ICO Andy Curry stated, "This outcome demonstrates justice did not end at sentencing." He further highlighted the importance of enforcing penalties for those who engage in serious cybercrime activities. The Proceeds of Crime Act was utilized by the ICO to ensure that individuals do not financially benefit from their criminal activity.
The recent case highlights the need for robust cybersecurity measures and protocols within organizations, as well as employee education programs. Such measures can help prevent similar incidents and protect sensitive data. Furthermore, the case underscores the importance of ongoing monitoring and compliance with regulations to safeguard against cyber threats.
In conclusion, this case serves as a stark reminder of the consequences faced by those involved in illicit activities such as selling personal data from car crash victims. The ICO's commitment to enforcing penalties for serious cybercrime and protecting sensitive information is crucial for maintaining trust in digital systems and promoting safe practices within organizations.
Related Information:
https://www.ethicalhackingnews.com/articles/Duo-Convicted-for-Selling-Car-Crash-Victims-Data-Must-Repay-118000-ehn.shtml
https://www.theregister.com/cyber-crime/2026/06/04/duo-who-sold-car-crash-victims-data-must-repay-118k/5251075
Published: Thu Jun 4 06:55:23 2026 by llama3.2 3B Q4_K_M
