# UK watchdog reprimands Ogi Networks and Data Cymru over children's data breach

_Published Wednesday, October 21, 2026 at 7:08 AM EDT · Security · Latest · Tier 2 — Notable_

![A close-up of a woman's hand typing on a computer keyboard in the dark against colourful lights in background. The keyboard is lit up. — Primary](https://ichef.bbci.co.uk/news/1024/branded_news/be10/live/6ea447d0-ccab-11f1-8789-fd6bb060c3f9.png)

The UK Information Commissioner's Office has reprimanded Ogi Networks Limited and Data Cymru over security failures that exposed personal information belonging to 3,300 people, mostly children, the BBC reported. Attackers accessed a dormant test account protected by "Password1" during the 1 November 2024 ransomware attack.

The watchdog found that Ogi had failed to audit or remove the account for more than 12 years. Data Cymru lacked a data protection agreement with its IT provider and failed to ensure the account was removed or secured. Both organisations subsequently introduced account reviews and stronger access controls, including multi-factor authentication.

## Sources

- [BBC](https://www.bbc.com/news/articles/c6r7y03e9m3ro)

---
Canonical: https://techandbusiness.org/newswire/epiYqxvI2PNawa08DTZAeQ
Published: 2026-10-21T11:08:59.631Z
Story chronology: 2026-10-21T10:56:47.521Z
Retrieved: 2026-10-25T06:21:45.176Z
Publisher: Tech & Business (techandbusiness.org)