Bristol City Council has shared 100 families names who have children with disabilities with other parents without getting their permission.
Every recipient may see the names of every child and the email addresses of their main carers.
The department of the council responsible for providing special services for disabled children issued the email, which the BBC has seen.
The General Data Protection Regulation (GDPR) has been violated, according to a spokeswoman for Bristol City Council.
They apologised to anyone who have been affected and have been in touch with people who were affected.
Source: https://www.bbc.com/news/uk-england-bristol-55048398
TPRM report: https://scoringcyber.rankiteo.com/company/bristol-city-council
"id": "bri223411623",
"linkid": "bristol-city-council",
"type": "Data Leak",
"date": "11/2020",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': 100,
'industry': 'Public Sector',
'location': 'Bristol, UK',
'name': 'Bristol City Council',
'type': 'Local Government'}],
'data_breach': {'number_of_records_exposed': 100,
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names of children with '
'disabilities',
'Email addresses of main '
'carers']},
'description': 'Bristol City Council has shared 100 families names who have '
'children with disabilities with other parents without getting '
'their permission. Every recipient may see the names of every '
'child and the email addresses of their main carers.',
'impact': {'data_compromised': ['Names of children with disabilities',
'Email addresses of main carers']},
'references': [{'source': 'BBC'}],
'regulatory_compliance': {'regulations_violated': 'General Data Protection '
'Regulation (GDPR)'},
'response': {'communication_strategy': 'The council has been in touch with '
'people who were affected.'},
'title': 'Bristol City Council Data Breach',
'type': 'Data Breach',
'vulnerability_exploited': 'Unauthorized Data Sharing'}