Ministry of Defence
Disclosed Feb 26, 20242 years agoSettled
UK ICO fine for security failings
The MOD sent emails inadvertently using the “To” field rather than the “BCC” field. 265 unique email addresses were disclosed in breach of GDPR Article 5(1)(f). The MOD were fined £350,000.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Feb 26, 2024 |
| Attack | Lost or stolen device |
| Data exposed | Not stated |
| Sector | Government · GB |
| Status | Settled |
| Lawsuit or fine | UK ICO fine of £350,000. (2024-02-26) |
Sources
| Source | |
|---|---|
| UK ICO fine: Ministry of Defenceico.org.uk · Regulator | Regulator |
Notices filed
| Where | Filed | People |
|---|---|---|
| UK ICOregulator:GB | Feb 26, 2024 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (UK ICO), confirmed by UK ICO. Record counts are as reported. Not legal advice.