Three intrusions at UK criminal records office went undetected for two years

Unread antivirus alerts and an unpatched content management system exposed Britain's ACRO to three separate data breaches, according to a reprimand notice.