The UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.

ICO Deputy Commissioner for Operations, James Dipple-Johnstone, said:

“The ICO has received a report that Eurofins Scientific, which provides forensic and scientific services to a number of UK law enforcement agencies, has been subject to a data breach.

“We are working with partners and other stakeholders, nationally and internationally, to establish the scale and extent of the incident and to ensure that the interests of UK citizens are protected.

“At present the Luxembourg Data Protection Authority, Commission Nationale pour la Protection des Données (CNPD), is currently the lead data protection authority for this investigation. As Eurofins has its main European establishment in Luxembourg, we have offered our help under the cooperation provisions of the GDPR.”