‘Password1’ and a forgotten test account land Welsh outfits in hot water

The UK Information Commissioner’s Office has reprimanded two Welsh organisations after a ransomware attack exposed data on 3,300 people, mostly children, The Register reports. The intruder entered through a test account created in 2012 with the password ‘Password1’ that had never been reviewed or removed.