Information Commissioner’s Office: The Microsoft 365 Built-In Security Feature: Microsoft Purview

Human Error Remains the Leading Cause of UK Data Breaches in 2024

A routine mistake an email sent to the wrong recipient has emerged as the most common cause of data breaches in the UK, far outpacing sophisticated cyberattacks. According to the Information Commissioner’s Office (ICO), UK public sector organizations reported over 2,400 suspected breaches in 2024, with the majority stemming from misdirected emails, improper file permissions, and unprotected personal data.

The incident often plays out the same way: an employee, relying on autocomplete, accidentally sends sensitive information to an unintended external recipient. By the time the error is caught, the damage is already done. These breaches highlight a critical gap while human error is inevitable, technical safeguards can prevent costly oversights.

Microsoft Purview offers one such solution, using Data Loss Prevention (DLP) policies to detect and flag sensitive data before it leaves an organization. In a real-world scenario, an HR manager sending a salary spreadsheet externally might receive an automated warning, prompting a last-second correction. Without these controls, the breach would go unnoticed until it’s too late.

The trend underscores the importance of a layered security approach. While tools like Entra ID, Multi-Factor Authentication (MFA), and Microsoft Intune protect users and devices, Purview’s DLP and sensitivity labels address the final pillar: securing data itself. As organizations adopt Zero Trust frameworks, integrating these controls can reduce reliance on human vigilance alone.

Source: https://aag-it.com/the-microsoft-365-built-in-security-feature-microsoft-purview/

Stopford cybersecurity rating report: https://www.rankiteo.com/company/stopford-information-systems-limited

"id": "STO1774657646",
"linkid": "stopford-information-systems-limited",
"type": "Breach",
"date": "3/2026",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 'Over 2,400 suspected breaches '
                                              'reported',
                        'industry': 'Public Sector',
                        'location': 'United Kingdom',
                        'name': 'UK Public Sector Organizations',
                        'type': 'Government/Organizations'}],
 'attack_vector': 'Human Error (Misdirected Email)',
 'data_breach': {'file_types_exposed': ['Spreadsheets', 'Emails'],
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal data',
                                              'Salary information',
                                              'Sensitive organizational data']},
 'date_publicly_disclosed': '2024',
 'description': 'A routine mistake—an email sent to the wrong recipient—has '
                'emerged as the most common cause of data breaches in the UK, '
                'far outpacing sophisticated cyberattacks. UK public sector '
                'organizations reported over 2,400 suspected breaches in 2024, '
                'primarily due to misdirected emails, improper file '
                'permissions, and unprotected personal data.',
 'impact': {'brand_reputation_impact': 'Potential reputational damage',
            'data_compromised': 'Sensitive information (e.g., salary '
                                'spreadsheets, personal data)',
            'identity_theft_risk': 'High (if personally identifiable '
                                   'information exposed)'},
 'lessons_learned': 'Human error is a leading cause of data breaches, and '
                    'technical safeguards like DLP policies can prevent costly '
                    'oversights. A layered security approach (e.g., Zero '
                    'Trust, MFA, DLP) reduces reliance on human vigilance.',
 'post_incident_analysis': {'corrective_actions': 'Implementation of DLP '
                                                  'policies, sensitivity '
                                                  'labels, and Zero Trust '
                                                  'frameworks',
                            'root_causes': 'Human error (e.g., misdirected '
                                           'emails, improper file '
                                           'permissions)'},
 'recommendations': ['Implement Data Loss Prevention (DLP) policies (e.g., '
                     'Microsoft Purview)',
                     'Use sensitivity labels to classify and protect data',
                     'Adopt Zero Trust frameworks',
                     'Enhance employee training on data handling and email '
                     'security',
                     'Integrate Entra ID and Multi-Factor Authentication '
                     '(MFA)'],
 'references': [{'source': 'Information Commissioner’s Office (ICO)'}],
 'regulatory_compliance': {'regulatory_notifications': 'Reported to '
                                                       'Information '
                                                       'Commissioner’s Office '
                                                       '(ICO)'},
 'response': {'containment_measures': 'Automated warnings via Data Loss '
                                      'Prevention (DLP) policies',
              'enhanced_monitoring': 'Integration of Entra ID, Multi-Factor '
                                     'Authentication (MFA), and Microsoft '
                                     'Intune',
              'remediation_measures': 'Implementation of Microsoft Purview '
                                      'DLP, sensitivity labels, and Zero Trust '
                                      'frameworks'},
 'title': 'Human Error Leading Cause of UK Data Breaches in 2024',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Lack of Data Loss Prevention (DLP) controls'}