UK ICO breach notifications

https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/

Information Commissioner's Office breach announcements. WebFetch returns HTTP 403 (ICO filters the routine UA; re-confirmed 2026-05-08). REQUIRED FETCH METHOD: `python3 tools/fetch_source.py url https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/`. For specific enforcement action listings use `python3 tools/fetch_source.py url https://ico.org.uk/action-weve-taken/enforcement/`. | 2026-06-20 full audit (v2.62): live=Y, drill=Y. FETCH → api: python3 tools/fetch_source.py ico-uk enforcement N (returns enforcement URLs from sitemap; then `url <enforcement_url>` for body). News index via `url https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/`.. AVOID: WebFetch 403s the routine UA — skip it, use the bridge. Article body text sits inside <main id='main-content'>; the page leads with a large cookie-banner JSON island so naive byte-range reads miss the body.. | 2026-07-05 admiralty audit: A — first-party government regulator publishing its own enforcement/breach decisions; primary authority for its jurisdiction. HIGH->A, stays active. | 2026-07-28: bridge returned the JS-rendered page shell with no dated listing. No demotion — transport/anti-bot block, not content death. | 2026-07-30: fetch_method bridge -> jina. S2 reached https://ico.org.uk/action-weve-taken/enforcement/ with HTTP 200 but the enforcement-action list sits behind a JS-hydrated block grid and no dated /enforcement/action/<slug> hrefs surface in the raw body. Switching fetch_method to jina to hydrate the listing. Transport block, not source death — no demotion (HTTP 200 throughout). | 2026-08-02: flagged needs-demote by the sweep, diagnosed as the reader-credential outage, NOT a recipe break. All four pooled jina keys report HTTP 402 (exhausted, negative balance) this run, and this record is pinned fetch_method: jina precisely because the listing is JS-hydrated. Direct alternatives probed this run: https://ico.org.uk/action-weve-taken/enforcement/ and the news-and-blogs listing both return HTTP 200 with a browser UA but expose no dated enforcement hrefs in the raw body (the hydration problem the 2026-07-30 note already recorded), and /rss paths under both return 404. No demotion — HTTP 200 throughout and the recipe is intact; the source returns as soon as reader credit is restored.