Norfolk & Suffolk Police Breach Exposes Personal Data of 1,230 Crime Victims
Norfolk and Suffolk Police have admitted that personal data belonging to 1,230 individuals, including crime victims and witnesses, was exposed due to a breach in their systems. In a joint statement issued by the constabularies, it was revealed that a small percentage of responses to Freedom of Information (FoI) requests for crime statistics between April 2021 and March 2022 contained raw data that should not have been included.
The compromised information includes personal identifiable details about victims, witnesses, and suspects, as well as descriptions of various offenses such as domestic incidents, sexual offenses, assaults, thefts, and hate crimes. Although the data was not visible to those who accessed the files, it should not have been included in the FoI responses in the first place.
The affected individuals are currently being notified by the police, with the mode of communication varying depending on the severity of the breach. The police are reaching out to them via mail, telephone, or face-to-face contact. The notifications will provide detailed information about the specific personal data that has been impacted and will also include contact details for further assistance and support.
Eamonn Bridger, Assistant Chief Constable of Suffolk Police, who spearheaded the investigation on behalf of both forces, expressed his apologies for the leak. He added that protocols for handling FoI requests to the constabularies are constantly under review to ensure the proper protection of all data under their control.
The Information Commissioner’s Office (ICO) is currently conducting an investigation into this breach, as well as a separate breach reported in November of last year. The deputy commissioner, Stephen Bonner, emphasized the importance of robust measures in place to safeguard personal information, particularly when dealing with sensitive data. Mr. Bonner assured that the ICO will continue to support organizations in order to enhance data protection and instill confidence in individuals that their information is secure.
This breach highlights the ongoing risks faced by individuals and organizations in the digital age. It serves as a reminder of the need for robust cybersecurity measures and the constant vigilance required to protect sensitive personal data. The investigation by the Information Commissioner’s Office will shed further light on the extent of the breach and may provide insights into any systemic issues that need to be addressed to prevent similar incidents in the future.
Both the Norfolk and Suffolk Police are committed to rectifying these breaches and ensuring that appropriate measures are taken to prevent any recurrence. As the investigation unfolds, it is crucial for individuals to remain vigilant and report any suspicious activity regarding their personal information. The aim is to strengthen data protection practices and prevent any potential misuse or unauthorized access to sensitive data.
The breach serves as a wake-up call for all organizations that handle personal data to implement stringent security measures and regularly review their protocols to stay ahead of evolving cyber threats. Protection of personal data is of paramount importance, and failure in this regard not only compromises individuals’ privacy but also erodes public trust. By learning from this incident and adopting best practices, organizations can work towards creating a secure environment for the data they hold.
