Breachesby GlyphMinistry of Defence
Disclosed Feb 26, 2024Settled
UK ICO fine for security failings
The MOD sent emails inadvertently using the “To” field rather than the “BCC” field. 265 unique email addresses were disclosed in breach of GDPR Article 5(1)(f). The MOD were fined £350,000.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Feb 26, 2024 |
| Attack | Lost or stolen device |
| Data exposed | Not stated |
| Sector | Government · GB |
| Status | Settled |
| Lawsuit or fine | UK ICO fine of £350,000. (2024-02-26) |
Sources
Notices filed
History of this record
First recordedby backfillSource
First seen 2026-09-25 (UK ICO), confirmed by UK ICO. Record counts are as reported. Not legal advice.