Data Breach at ACS:Law Draws ICO Attention; Attorney Regulator May Also Look Into Case

LONDON—The U.K.’s Information Commissioner’s Office said Sept. 30 that it is investigating a potential violation of data security laws committed by lawfirm ACS:Law, following the firm’s disclosure of a data breach involving the personal information of thousands of people thought to be involved in unlawful peer-to-peer file-sharing.

“We have contacted the company to establish further facts of the case and to identify what action, if any, needs to be taken,” the ICO, the U.K.’s data protection authority, said in a statement.

The investigation follows a complaint made Sept. 27 by rights group Privacy International to the ICO claiming that ACS:Law ...