‘Password1 is not an appropriate password, it is a wide-open door to nefarious actors’, the ICO’s head of investigations warned in his rebuke