Gateshead council has admitted a series of data breaches, including uploading personal medical details to an online forum.
The Organization also sent letters containing private information to the wrong addresses and sent a debtor a list of other people who owed it money.
Staff responsible for the breaches have been reminded to update addresses and double check recipients of emails.
They have also been given training and advice about secure methods of sharing data.
Source: https://www.bbc.com/news/uk-england-tyne-47460370
TPRM report: https://scoringcyber.rankiteo.com/company/gateshead-council
"id": "gat33812323",
"linkid": "gateshead-council",
"type": "Breach",
"date": "03/2019",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'industry': 'Public Administration',
'location': 'Gateshead, UK',
'name': 'Gateshead Council',
'type': 'Government'}],
'attack_vector': ['Human Error'],
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal Medical Details',
'Private Information',
'Debtor Information']},
'description': 'Gateshead Council admitted a series of data breaches, '
'including uploading personal medical details to an online '
'forum, sending letters containing private information to the '
'wrong addresses, and sending a debtor a list of other people '
'who owed it money.',
'impact': {'data_compromised': ['Personal Medical Details',
'Private Information',
'Debtor Information']},
'lessons_learned': 'Ensure staff are trained on secure data sharing methods '
'and verify recipient information before sending sensitive '
'data.',
'post_incident_analysis': {'corrective_actions': 'Staff Training and Advice '
'on Secure Data Sharing',
'root_causes': 'Human Error'},
'recommendations': 'Implement stricter data handling protocols and regular '
'training sessions for staff.',
'response': {'remediation_measures': ['Staff Training',
'Advice on Secure Data Sharing']},
'title': 'Gateshead Council Data Breaches',
'type': 'Data Breach'}