The governments Information Commissioner's Office (ICO) has handed down a measly fine of £1,000 to the boss of defunct solicitors firm ACS:Law UK - 'Andrew Jonathan Crossley' - after a failed attempt to recover their website last year resulted in thousands of private customer records from several major broadband ISPs ( e.g. Sky Broadband and PlusNet ) being leaked (original news) online.

ACS:Law made its living by "bullying" customers of UK ISPs, specifically those whom they "suspected" of being involved with "illegal" internet copyright infringement via public P2P (BitTorrent) file sharing networks, into paying hefty fines.

However, the firms harsh methods ultimately lead to its website being hit by a Distributed Denial-of-Service (DDoS) attack, which was conducted by the now infamous group called 'Anonymous'. Sadly an attempt to restore the website resulted in a backup of Crossley's private emails being uploaded by mistake. It was soon leaked.

Privacy International (PI) promptly issued a complaint about this to the ICO and warned that the data breach was "likely to result in significant harm to tens of thousands of people in the form of fraud, identity theft and severe emotional distress" (Full PI Report).

The ICO's subsequent investigation claims to have found serious flaws in ACS:Law's IT security system and blames Crossley for failing to "seek professional advice" and only using a cheap and inadequate web-hosting package that was "intended for domestic use".


ACS:Law officially "ceased trading" at the end of January 2011 and many people believe that this was little more than a crafty attempt to avoid suffering the financial backlash from its failed court case against 27 broadband ISP customers. The judge in that case was clearly less than pleased and is now allowing a claim for £90,000 in wasted costs against Crossley to proceed (here).

Crossley is understood to have issued a sworn statement to the ICO that allegedly reflects his currently weak financial situation and thus an inability to pay a hefty fine. Amazingly the already tiny £1,000 fine will be reduced to £800 if Crossley pays on time.

Meanwhile at least 6,000 people have had their ISP account details, their names and addresses, their IP addresses, credit card details, sexual preferences, health details, financial status and information about the content they were alleged to have illegally copied strewn across the internet.