Jersey Islands finance regulator reports data leak due to misconfiguration
Learn More
The Jersey Financial Services Commission (JFSC) reports a data breach that has allowed unauthorized access to non-public names and addresses.
The Jersey Financial Services Commission (JFSC) is the financial regulatory agency for Jersey, Channel Islands. It is responsible for regulating and supervising the finance industry in Jersey, including banking, fund services, insurance, and general financial services.
The incident was traced back to a vulnerability in the Registry system, identified on 23 January, due to a misconfiguration by a third-party provider. Despite the breach, the leaked data did not link individuals to specific registered entities or roles.
A total of 66,806 individuals have had their names and addresses accessed via the API, and their information was not already in the public domain through the registry system.
Those affected by the breach have been contacted by the JFSC. The Commission is conducting a comprehensive investigation to understand the cause and is collaborating with the Jersey Office of the Information Commissioner to address the situation.
No details have been disclosed about the vulnerability.
