2014 Morrisons — 100K staff payroll data stolen
Data compromised
Names, addresses, bank details, NI numbers, salaries
Technical writeup
Employee Andrew Skelton stole and published payroll data. Names, addresses, bank details, NI numbers, salaries. Posted on file-sharing sites, sent to newspapers. Jailed 8 years. Supreme Court ruled Morrisons not vicariously liable (2020).
Root cause
Insider threat; revenge