The UK ICO fined LastPass £1.2 million after a 2022 breach exposed personal data of 1.6 million users. The breach resulted from a series of security failures, including a compromised employee device and weak password practices, allowing attackers to access sensitive customer information.

Capita has been fined £14 million by the UK's Information Commissioner's Office following a severe cyberattack in 2023 that exposed personal data of 6.6 million individuals. The ICO criticized Capita for its sluggish response to the attack, which lasted 58 hours before containment measures were enacted, highlighting significant security failures within the organization.