GCHQ wants YOU to change your organisation's password practices

Compromised data was used to make unauthorised purchases in fewer than 400 cases

Unanswered questions about how many unauthorised parties may have accessed the sensitive information

'That is the urgent task to which the British and other governments should apply themselves,' says former head of NCSC