Security News > 2023 > December > Yet another UK public sector data blab, this time info of pregnant women, cancer patients

In both cases, it was an own goal when the org handed over the data itself while responding to requests made under the Freedom of Information Act 2000.

The majority of the patients whose data was made public were maternity patients of The Rosie Hospital at the Addenbrooke's Hospital site.

The website alerted the trust that they could see the data and promptly removed the information when it learned of its exposure.

The Information Commissioner's Office has been made aware of the incidents, and a spokesperson told The Register that the watchdog is assessing the information provided.

"Public authorities should be putting robust measures in place to protect personal data when responding to information access requests, and to reassure the people they serve, and their staff, that their information is in safe hands."

As highlighted by the ICO, the incident at Addenbrooke's Hospital marks the latest in a long line of data breaches at UK public sector organizations this year.

News URL

https://go.theregister.com/feed/www.theregister.com/2023/12/07/losing_track_yet_yet_another/