Incident Score: Analysis & Impact (POL1773319619)

In this Rankiteo incident briefing, we review the Police Scotland breach identified under incident ID POL1773319619.

The analysis begins with a detailed overview of Police Scotland's information like the linkedin page: https://www.linkedin.com/company/police-scotland, the number of followers: 41464, the industry type: Law Enforcement and the number of employees: 3920 employees

After the initial compromise, the video explains how Rankiteo's incident engine converts technical details into a normalized incident score. The incident score before the incident was 771 and after the incident was 674 with a difference of -97 which is could be a good indicator of the severity and impact of the incident.

In the next step of the video, we will analyze in more details the incident and the impact it had on Police Scotland and their customers.

On 01 September 2022, Police Scotland disclosed Data Breach issues under the banner "ICO Fines Police Scotland £66,000 for Mishandling Crime Victim’s Sensitive Data".

The UK’s Information Commissioner’s Office (ICO) has fined Police Scotland £66,000 following a series of data protection failures involving a crime victim’s mobile phone.

The disruption is felt across the environment, and exposing Special category data (health records, religious beliefs, personal details), plus an estimated financial loss of £66,000 (fine imposed).

In response, moved swiftly to contain the threat with measures like Improved oversight and revised processes, and began remediation that includes Additional training for officers.

The case underscores how Completed, teams are taking away lessons such as Importance of lawful and proportionate data collection, safeguarding sensitive information, and timely breach reporting, and recommending next steps like Implement stricter data handling protocols, enhance training for officers, and ensure compliance with data protection regulations.

Finally, we try to match the incident with the MITRE ATT&CK framework to see if there is any correlation between the incident and the MITRE ATT&CK framework.

The MITRE ATT&CK framework is a knowledge base of techniques and sub-techniques that are used to describe the tactics and procedures of cyber adversaries. It is a powerful tool for understanding the threat landscape and for developing effective defense strategies.