Another police force admits data breach after staff salaries published
Cumbria Police said information about pay and allowances had been uploaded on a website after a ‘human error’.
Your support helps us to tell the story
From reproductive rights to climate change to Big Tech, The Independent is on the ground when the story is developing. Whether it's investigating the financials of Elon Musk's pro-Trump PAC or producing our latest documentary, 'The A Word', which shines a light on the American women fighting for reproductive rights, we know how important it is to parse out the facts from the messaging.
At such a critical moment in US history, we need reporters on the ground. Your donation allows us to keep sending journalists to speak to both sides of the story.
The Independent is trusted by Americans across the entire political spectrum. And unlike many other quality news outlets, we choose not to lock Americans out of our reporting and analysis with paywalls. We believe quality journalism should be available to everyone, paid for by those who can afford it.
Your support makes all the difference.Another police force has admitted a data breach after the names and salaries of all its staff were accidentally published online.
Cumbria Police said that on March 6 it found out information about pay and allowances had been uploaded on its website following a “human error”.
The force’s admission comes after an “industrial scale breach of data” in Northern Ireland this week which saw some details of around 10,000 officers and staff published online for a number of hours.
Details of another breach with the theft of documents and a laptop from a car in Newtownabbey in July also emerged on Wednesday.
Cumbria Police said the impact of the breach was “low”, but the force had to contact every person affected.
It said: “Cumbria Constabulary became aware of a data breach on Monday March 6 2023 where information about the pay and allowances of every police officer and police staff roles as at March 31 2022 was uploaded to the Constabulary’s website, which was a human error.
“The pay and allowance data also included names and position, however, it did not contain information about where the posts were deployed from or personal details such as date of birth and address.
“This information was removed immediately after the breach was identified.
“Cumbria constabulary immediately contacted every affected person about the data breach, explaining that the impact of this breach was low and the measures the constabulary had put in place to manage the breach and to prevent it happening again.”
The breach was referred to the Information Commissioner’s Office (ICO), which said no further action was necessary.