From the article: > McNally [Chief Executive] said: “We regret that sufficient protections were not in place to prevent this cyber-attack. Since identifying it

From the article: > McNally [Chief Executive] said: “We regret that sufficient protections were not in place to prevent this cyber-attack. Since identifying it, we have taken significant steps with the support of specialists to improve the security, resilience and reliability of our IT systems. Finding out nearly 2 years after a breach is really poor considering the potential for phishing given someone full name and address. The Electoral Commission should really be pressed to give a proper post mortem and not get away with "sufficient protections" and "significant steps".