Human error has been blamed for the Ceredigion council data leak that was discovered last year. Personal and sensitive information had been accidentally uploaded to the council’s website in error.
The matter was reported to the ICO (Information Commissioner’s Office) who could still issue a GDPR fine. However, for the victims, justice can be achieved by a separate legal case they’d be entitled to launch.
Human error remains one of the top causes for data breach incidents in the UK. Council data breach compensation claims are also one of the more common types of cases we deal with as well. We’re therefore not surprised to hear that the Ceredigion council data leak fits into this category.
About the Ceredigion council data leak
The Ceredigion council data leak was discovered last year. A number of documents had been accidentally uploaded to the council’s website. The documents reportedly contained names, addresses, and in some cases, medical information.
The council is said to have contacted a number of the victims who were affected by the leak. Information may have been available on the website for anyone to view since 2007.
Human error blamed for Ceredigion council data leak
It has now been confirmed that human error is to blame for the Ceredigion council data leak. The documents are said to have been accidentally published when the council’s website was redesigned a few years ago because the documents had been incorrectly filed.
As a result of the leak, the council has reportedly changed their systems and are looking to ensure that all documents are now double-checked.
This was undoubtedly a preventable leak. Human error is one of the top causes for data leaks, and in most cases, they are entirely preventable.
As we often say, a little bit of information can go a long way. When there are so many other breaches and hacks happening all the time, no breach can truly be dismissed as harmless. Even those involved in the Ceredigion council data leak who only had their personal contact information leaked could still face risks and can still be distressed.