An ICO investigation found that a series of avoidable data security flaws allowed the personal details of around 2.7 million UK customers to be accessed and downloaded by attackers

https://www.computerweekly.com/news/252453244/ICO-fines-Uber-385000-for-data-protection-failings