Gloucestershire Police has been fined £80,000 by the Information Commissioner’s Office.
It sent a bulk email that identified victims of non-recent child abuse.
An officer sent an update on the case to 56 recipients by email but entered their email addresses in the ‘To’ field and did not activate the ‘BCC’ function, which would have prevented their details from being shared with others.
Each recipient of the e-mail including victims, witnesses, lawyers and journalists could see the full names and e-mail addresses of all the others.
The email also made reference to schools and other organizations being investigated in relation to the abuse allegations.
"id": "GLO2124181122",
"linkid": "gloucestershire-constabulary",
"type": "Data Leak",
"date": "06/2018",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"
Join the conversation