I published this note about supply chain security today. Less than 8 hours later we learn that the ICO has fined the Crown Prosecution Service £200k for failing to secure some laptops that held confidential information on victims of crime. The laptops were stolen from a residential flat being used by a film production company as an edit suite. If I’d made that up as an example of poor supply chain security, you wouldn’t have believed me.
Oh, and the laptops weren’t encrypted. Of course. Because encryption’s only been a thing since about 1900BCE, so it’s still just for paranoid early-adopters, right?