84,011 User Accounts Compromised in The Fly on the Wall Data Breach
What Happened – In December 2017 the news‑website The Fly on the Wall suffered a data breach that exposed 84,011 user records. The compromised data set includes email addresses, names, physical addresses, phone numbers, ages, genders, usernames, purchase histories and credit‑card details. The breach was reported to Have I Been Pwned; the site never publicly responded.
Why It Matters for Trust & Control Assurance
- The incident illustrates the risk of inadequate data‑protection controls (encryption, tokenisation, monitoring) that a continuous control‑assurance program is built to detect and evidence.
- Demonstrating that you have documented, auditable controls for data classification, access restriction and breach‑response can provide a defensible audit trail when regulators or partners request proof.
- Mapping this breach to the Data Protection control objective shows how a single control can satisfy multiple frameworks (e.g., NIST CSF 2.0, ISO 27001, GDPR) simultaneously.
Who Is Affected – Media and publishing organisations that handle subscriber personal and payment data.
Recommended Actions
- Review and document data‑classification policies; ensure credit‑card data is tokenised or encrypted at rest.
- Verify that logging and alerting for unauthorized data access are enabled and retained per regulatory guidance.
- Conduct a tabletop breach‑response exercise and capture evidence of each step for audit readiness.
Technical Notes – No specific vulnerability or attack vector was disclosed; the breach appears to be a result of insufficient protection of stored customer data. Source: Have I Been Pwned – The Fly on the Wall breach