Morrisons Details

    Organization Logo

    Morrisons

    Bradford, England employees • Retail

    Industry

    Retail

    Security Incidents

    1

    Wm Morrison Supermarkets Limited, trading as Morrisons, is the fifth largest supermarket chain in the United Kingdom. As of 2021, the company had 497 supermarkets across England, Wales and Scotland, and one in Gibraltar.

    Security Incidents

    Morrisons Breach of Mar 2014
    Severity Score
    Significant

    Type

    Insider Threat

    Summary

    In 2014, Morrisons employee Andrew Skelton leaked his colleagues' payroll data in an act of revenge against his employer after he was issued a verbal warning for using the company's post room to run an online business selling 'legal highs'.

    Morrisons' checkout and shelf-stacking staff are worried after thieves leaked employee payroll details online. The supermarket confirmed the theft on Facebook and stated it took immediate action to remove the data from the website. The stolen information included names, addresses, and bank account details, affecting employees at all levels. Morrisons is wo...
    Show more

    Severity

    The data breach at William Morrisons Supermarket plc, orchestrated by former senior IT analyst Andrew Skelton, exposed personal and financial details of nearly 100,000 employees. Skelton's revenge act, following a perceived undeserved formal warning, led to a significant legal battle, with around 5,500 employees suing Morrisons for breaches of the Data Protection Act. The incident highlighted severe lapses in Morrisons' data security systems and had far-reaching legal and reputational consequences for the supermarket chain.

    Impact

    The data breach at William Morrisons Supermarket plc affected nearly 100,000 employees, exposing their personal and financial details. Both current and former staff members, from all levels of the organization, were impacted by the leak. Approximately 5,500 of these employees pursued legal action against Morrisons, citing breaches of the Data Protection Act.