The Racing Post suffered a data breach affecting over 677,000 users late last year. The Information Commissioners Office says it has been slacking off on its security arrangements since at least 2007. The website has been given until the end of February 2015 to get its house in order. The ICO has the power to impose a fine of up to 500,000 on data controllers found to be in breach of the Data Protection Act, but the breach did not cause substantial damage and distress to merit a fine.”]