Personal data of all Welsh coronavirus cases compromised in breach

Public Health Wales says leak that affected more than 18,000 people to have tested positive was attributable to ‘human error’

Credit: Katie Collins/EMPICS Entertainment

Personal information of every person in Wales to have tested positive for coronavirus up to the end of last month has been compromised in a data breach.

The incident occurred on 30 August when an employee of Public Health Wales was uploading data to the Tableau business-intelligence software platform used by the organisation.

“Unfortunately, at the last minute, the member of staff clicked to publish on the public-facing server rather than the internal restricted one,” Public Health Wales said.

The personal data of 18,105 people that have tested positive for coronavirus was thus published; this represents all confirmed cases of the disease in Wales from the first positive test on 27 February through to the date of the breach.

In 16,179 cases, the data leaked included the individual’s initials, sex, date of birth, and local authority area.

The remaining 1,926 people live in “closed settings”, such as a nursing home or supported-living facility – or share a postcode with such a setting. In these cases, the name of this setting was also published. 


Related content


“[Data published] did not contain the person’s NHS number and we do not believe it would be possible to access other health or financial records using this data alone,” Public Health Wales said. “However, we recognise that the disclosure of any confidential personal information is likely to cause concern and anxiety among those affected and we deeply regret that this has happened.”

Information was publicly visible from 2pm on 30 August until 9.50am the following day. It was viewed 56 times during that period, but it is not possible to identify who did so, according to the health authority.

Those affected by the breach are not being individually contacted as Public Health Wales has “concluded, after legal advice and consultation with the ICO, that writing to all those affected is not required in this case because the risk to them is considered low”.

It added: “There is no evidence that any of the personal information involved in the data breach has been misused and we do not believe it would be possible to access other health or financial records using this information alone. However, we are monitoring the situation.”

The breach took place on the Saturday and Sunday of the August bank holiday weekend and the Information Commissioner’s Office and the Welsh Government was notified of the incident on Wednesday 2 September.

The ICO is understood to be examining the breach and Public Health Wales has also commissioned an external review, to be led by the head of information governance at the NHS Wales Informatics Service.  

This review, which is due to report back in four weeks’ time, will “look into exactly how this happened and what lessons can be learned”. Its investigation will include an examination of why the data in question was not “anonymised or pseudonymised”.

“The data was designed to be identifiable only by those with other detailed information on recent cases, who already need to have access to named patient data through our health protection response, in order to provide public health advice,” Public Health Wales said. “This was an internal dashboard designed for these NHS professionals and was published publicly in error.”

While the review goes on, the health agency has already “taken immediate steps to prevent a similar incident from happening again”. 

This includes the creation of an incident-management team tasked with overseeing “remedial actions”.

“[This has] already resulted in changes to our standard operating procedures so that any data uploads are now undertaken by a senior member of the team,” Public Health Wales said. “We have also informed our health board and local authority partners and have kept them up to date with the position.”

Other measures implemented in light of the incident include separating processes for the use of internal and external dashboards, and instituting additional checks on servers.

Tracey Cooper, chief executive of Public Health Wales said: “We take our obligations to protect people’s data extremely seriously and I am sorry that on this occasion we failed. I would like to reassure the public that we have in place very clear processes and policies on data protection. We have commenced a swift and thorough external investigation into how this specific incident occurred and the lessons to be learned. I would like to reassure our public that we have taken immediate steps to strengthen our procedures and sincerely apologise again for any anxiety this may cause people.”

Anyone concerned about their data or that of a loved one having been compromised is advised to call 0300 003 0032 or email phw.data@wales.nhs.uk

 

Sam Trendall

Learn More →

47 thoughts on “Personal data of all Welsh coronavirus cases compromised in breach

  1. 弓使い キャラ 女 November 1, 2024 at 10:46 am

    Cudicini began the season second alternative to Friedel, however after the addition of Hugo Lloris to the squad, Cudicini was restricted to the role because the back-up goalkeeper in Tottenham’s Europa League marketing campaign.

  2. スターバックス 資産 November 1, 2024 at 1:54 pm

    Whereas wrinkled or even bruised apples can nonetheless make for good eating, you undoubtedly need to avoid apples which have mold growing on them or which have begun to ooze liquid.

  3. 夏油傑 女たらし November 1, 2024 at 2:51 pm

    Finally, in 1892 he based his personal glassworks, the Louis C. Tiffany Furnaces in Corona Queens.

  4. イスラエル空爆 November 1, 2024 at 4:12 pm

    In March 2015, Cudicini joined the Republic of Ireland national under-21 soccer group teaching workers as goalkeeping coach.

  5. ホンダ野球部 寮 November 1, 2024 at 5:19 pm

    The dimensions and type of your pool, in addition to the amount of debris it usually collects, ought to information your selection.

  6. ウクライナ日本人モテる November 1, 2024 at 5:42 pm

    The size of your pool pump cowl will must be larger to accommodate the increase in the scale of the tools needed to take care of your pool.

  7. 困った顔文字 かわいい November 1, 2024 at 6:06 pm

    Here is a microcosm of the Valley’s resilient and imaginative spirit- the best and beloved lunch and dinner spots in Phoenix and its surrounding cities.

  8. 自分が悪い 四字熟語 November 1, 2024 at 6:35 pm

    It’s inexpensive and saves a ton of time during cleanup.

  9. もち吉店舗 関西 November 1, 2024 at 7:23 pm

    Anyway, if you’re uninterested in bittersweet tales and just wish to snort, then these suggestions will be a pleasant palate cleanser.

  10. 投資信託 買い どき 2023 November 1, 2024 at 8:18 pm

    Sunil Chhetri began his career with City Membership, a neighborhood membership based mostly in Delhi and joined them throughout the 2001-02 season.

  11. 60代女性 うつ November 1, 2024 at 8:22 pm

    He then helped Eintracht Frankfurt qualify to knockout stage of the UEFA Europa League Group Stage and helped the membership earn four clear sheets along the way.

  12. 社会 福祉 士 予想 合格 点 November 1, 2024 at 9:08 pm

    Full Home (Thai: วุ่นนัก รักเต็มบ้าน ) is a 2014 Thai romantic comedy television series remake of the popular Korean series Full Home, starring Mike Angelo and Sushar Manaying .

  13. 警察庁とは November 1, 2024 at 9:12 pm

    Subsequently, the 2nd Division campaigned with American forces in Lorraine, spearheading the US Seventh Army’s drive via the northern Vosges Mountains and forcing the Saverne Gap.

  14. マリンパーク福岡 November 1, 2024 at 9:21 pm

    Here’s the good news: Phoenix and its surrounding cities are bursting with nice bars and cocktail lounges, suited to a spread of hangouts.

  15. cambridge quantum computing 株価 November 1, 2024 at 9:29 pm

    This web page was last edited on 29 April 2024, at 11:Forty six (UTC).

  16. いい人が多い職業 November 1, 2024 at 9:59 pm

    Ventilation: Pump rooms require proper ventilation to forestall the buildup of fumes and moisture.

  17. 知る 活用形 古文 November 1, 2024 at 10:33 pm

    Maintained and contributed to from a lot of Christian organizations, the site offers articles on varied topics associated to Christianity, music, podcasts, Bible research, devotionals, and other content.

  18. 落雷 テレビ 故障 火災保険 November 1, 2024 at 10:48 pm

    One month after the invasion, command was handed over to SHAEF (Supreme Headquarters, Allied Expeditionary Forces) below US Basic Dwight D. Eisenhower, the supreme commander of Allied forces on the Western Entrance.

  19. Pasang Iklan Jual Sewa Properti November 1, 2024 at 11:36 pm

    Your articles consistently deliver Thank you for sharing your expertise IDProperticom

  20. キョウデン 株価 掲示板 November 1, 2024 at 11:47 pm

    Chaudhuri, Arunava. “Season ending Transfers 2002: India”.

  21. ビクシリン 内服 November 2, 2024 at 12:05 am

    Most pedals we sell together with our ARDX20 delay, AMAZE1 controller, Prince of Tone, etc are in inventory and able to ship!

  22. Pasang Iklan Sewa Rumah November 2, 2024 at 3:18 am

    Website ini memang pilihan terbaik untuk membaca artikel berkualitas. Terima kasih telah berbagi, IDProperti.com | Pasang Iklan Properti Gratis

  23. 負のエネルギー 職場 November 2, 2024 at 6:58 am

    281. A mother appears to be like adoringly at her younger bride – seen at her stunning finest in a white bridal gown, complete with a lovely long lace veil.

  24. 山喜 株価 November 3, 2024 at 7:04 am

    Journey websites permit you to account for all of your main journey expenditures with out much work in your half.

  25. ナハンテ 韓国語 November 3, 2024 at 8:21 am

    Now if you recognize the context of the dialogue and choose up all the neighbouring phrases, you are not likely to be confused about the meaning of pâté de foie gras (unless, perhaps, you are in some weird California cult-o-mart), but when you’re in language studying mode, missing about 10 of the words and struggling to grasp the rest as quick as any individual is speaking, the added ambiguity of sounds really makes issues robust.

  26. 鹿児島 花火大会 10月 November 3, 2024 at 11:19 am

    Each time you make a cost, update the tracker.

  27. 行きずり 英語 November 3, 2024 at 12:08 pm

    The energy environment friendly residence improvement credit (Half II) is simply available for existing homes.

  28. 食物 アレルギー 乳児 November 3, 2024 at 12:51 pm

    The kind “D” circuit breaker allows for the upper current at startup (as the compressor starts) without tripping the breaker.

  29. eu 加盟 メリット November 3, 2024 at 1:07 pm

    Brian Clarke: Life and Death.

  30. 大変嬉しく存じます November 3, 2024 at 1:38 pm

    You need your prospects to come again, right?

  31. 大椎 ツボ 押し方 November 3, 2024 at 2:22 pm

    In 1921, Blenko began one other sheet glass firm, this time in Milton, West Virginia because of low natural gasoline prices, a significant concern for glass manufacturers of the time, which drew many potential glassblowers to the area.

  32. 下肢 静脈 瘤 保険 November 3, 2024 at 4:42 pm

    Nonetheless, it does a very good job of amassing mud, and the top actually swivels quite effectively, making it simple to control on the wall or on the ceiling.

  33. 耳掃除 オリーブオイル November 3, 2024 at 4:51 pm

    The de Pympes made fairly an impression upon Nettlestead of their day.

  34. ウクライナ 難民数 November 3, 2024 at 5:02 pm

    Crepes are insanely in style all around the world, and each area has its personal version, however what nation introduced them?

  35. odaとは 子供向け November 3, 2024 at 5:08 pm

    A couple of of them are titles issued twice by RCA, first with monaural sound, and later with stereo sound.

  36. 地震 2 ちゃん 予言 November 3, 2024 at 5:08 pm

    Having begun his career at Legia Warsaw, Fabiański joined Arsenal for £2.1 million in 2007, and was primarily used as back-up, however performed because the membership gained the 2014 FA Cup closing.

  37. 戸籍売買 掲示板 November 3, 2024 at 5:32 pm

    The final subject of Yen Plus in July 2010 contained the conclusion to Pig Bride.

  38. 公債とはどういう意味ですか November 3, 2024 at 5:41 pm

    She provides advice to Ming Tian and Music Xiaomi once they need help with their feelings.

  39. ウケる 漢字 November 3, 2024 at 5:53 pm

    He labored with and employed other designers and was instrumental in encouraging the agency of John Hardman and Co.

  40. 東京 海上 火災 保険 見積もり November 3, 2024 at 6:45 pm

    Nonetheless, he suffered a hamstring injury while on worldwide obligation and missed one match as a result.

  41. インボイス登録 November 3, 2024 at 7:09 pm

    One is in a black patterned dress with a burgundy mantelet; the opposite in a dress of blue, with lovely layers.

  42. 韓国人 鼻の穴 November 3, 2024 at 7:18 pm

    The main points of the early home windows were added by painting in brown enamel, which was then fired onto the glass.

  43. オスカー魚 November 3, 2024 at 8:46 pm

    Break down your debt payoff goal into equal steps.

  44. 国債 ペーパーレス November 3, 2024 at 9:37 pm

    RMC wahs have been backed up however we are getting them in more usually now, see my RMC web page for current standing.

  45. 有田磁器土 November 3, 2024 at 9:57 pm

    1,200 for insulation or air sealing material system.

  46. Iklan Sewa Apartemen November 4, 2024 at 1:17 am

    Your blog is a gem in the digital world Thanks for sharing! Pasang Iklan Properti Gratis

  47. Situs Iklan Jual Beli Rumah November 4, 2024 at 4:53 am

    Salam kenal admin, pasti akan sering berkunjung ke website Anda juga. IDProperti.com | Pasang Iklan Properti Gratis

Leave a Reply

Your email address will not be published. Required fields are marked *