DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

Paradise Papers firm tries to prevent further releases of data

Posted on January 23, 2018 by Dissent

Ian Health reports that Appleby, a firm at the centre of the Paradise Papers data leak, has hired a high-profile media lawyer to help block further releases of confidential client data. Health reports:

Appleby have maintained that the documents were illegally hacked from their files and have since initiated legal proceedings against the BBC and the Guardian, who they claim have not co-operated with information requests they have made.

The firm issued a claim for breach of confidence on 4 December, as well as an application for disclosure and information. Appleby says that it needs to know what documents were taken from its files so it can advise its clients.

Read more on Jersey Evening Post.

For its part, Appleby issued the following media statement to explain its reasons for its litigation:

“The first procedural hearing in relation to Appleby’s legal action against the Guardian and the BBC took place on Tuesday 16 January. Mrs Justice Rose has reserved her decision and both parties will be notified when this decision is reached.

Appleby issued a claim for breach of confidence against the BBC and The Guardian on 4 December 2017. It simultaneously issued an application for disclosure and information from the BBC and the Guardian.

Appleby’s main objective of this application, and indeed the proceedings as a whole, is to understand which of our confidential and privileged documents were stolen by hackers so that we can for example respond meaningfully to clients and colleagues about what information, relating to them, has been taken. This is something that we have repeatedly requested over a period of months and has always been refused by BBC and Guardian journalists.

This case is not about trying to identify journalistic sources or suppressing freedom of speech. We do not understand how us being informed of what documents have been taken could lead to the identification of any source. In addition, correspondence shows that we did all we could to co-operate with the BBC and the Guardian before their publication deadlines.

This case is about taking reasonable and proportionate steps to identify what information has been stolen from us. Our claim is narrow in its main focus. It is for breach of confidentiality including most importantly in legally privileged documents.

Reluctantly we have concluded that in the absence of any voluntary co-operation from the BBC and the Guardian, the only way for us to find out what information has been stolen, which we are morally obliged to provide to our clients and colleagues, is through the courts”.

Please ensure this statement is published or included in its entirety in any article and attributed to Appleby.

Appleby wish to make no further comment in this regard.

So… what do you think about the litigation now that you’ve read their statement? Do you think they have a valid justification?

If this case was here, the media could use the data they had been provided and would have no obligation not to publish it. Could a victim here get an injunction barring further releases of data from a hack or leak under the circumstances of this case? I almost think they couldn’t, but then, IANAL and all those other disclaimers.

But that’s just one aspect: further disclosure. The other issue is providing a victim with information on the scope of a hack or breach. If this was in the U.S., it would not be the BBC’s or the Guardian’s responsibility to provide forensics or breach investigation help to Appleby. But what about in the U.K.?  What is the law there?

I’m intrigued that Appleby has retained Hugh Tomlinson QC.  I can understand Tomlinson representing them on the issue of further disclosure, as he has represented clients who wished to suppress publication of embarrassing details. But does Tomlinson accepting this case mean that he actually believes that the media has a duty to not publish material of high public interest and import and/or to assist breach victims by revealing what data they received? I’m somewhat shocked if that would be his position, so I’ll be watching this case.

 

No related posts.

Category: Breach IncidentsBusiness SectorNon-U.S.Of Note

Post navigation

← MS: Fast Response by Singing River Health System May Have Averted Major PHI Hack
Major data breach at University of Windsor law school →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Kentfield Hospital victim of cyberattack by World Leaks, patient data involved
  • India’s Max Financial says hacker accessed customer data from its insurance unit
  • Brazil’s central bank service provider hacked, $140M stolen
  • Iranian and Pro-Regime Cyberattacks Against Americans (2011-Present)
  • Nigerian National Pleads Guilty to International Fraud Scheme that Defrauded Elderly U.S. Victims
  • Nova Scotia Power Data Breach Exposed Information of 280,000 Customers
  • No need to hack when it’s leaking: Brandt Kettwick Defense edition
  • SK Telecom to be fined for late data breach report, ordered to waive cancellation fees, criminal investigation into them launched
  • Louis Vuitton Korea suffers cyberattack as customer data leaked
  • Hunters International to provide free decryptors for all victims as they shut down (2)

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • German court awards Facebook user €5,000 for data protection violations
  • Record-Breaking $1.55M CCPA Settlement Against Health Information Website Publisher
  • Ninth Circuit Reviews Website Tracking Class Actions and the Reach of California’s Privacy Law
  • US healthcare offshoring: Navigating patient data privacy laws and regulations
  • Data breach reveals Catwatchful ‘stalkerware’ is spying on thousands of phones
  • Google Trackers: What You Can Actually Escape And What You Can’t
  • Oregon Amends Its Comprehensive Privacy Statute

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.