The Supreme Court ruled that Morrisons is not liable for the actions of a rogue employee whose malicious actions caused a data breach. The case, WM Morrisons Supermarket PLC v Various Claimants, was the first in the UK to test whether companies could be vicariously liable for cybersecurity incidents caused by employees’ actions. The decision means that the 9,000 employees whose details were published online and were part of the group litigation against the supermarket would not be able entitled to any compensation. The ruling could have had costly ramifications for both the retailer and companies across the UK.”]