A recent incident involving the City of York Council has led to the exposure of the email addresses of hundreds of Blue Badge holders, revealing their status as disabled residents. This breach, described by the council as a “personal data breach,” is currently under investigation.
Details of the Breach
The breach occurred when the council sent out emails without utilizing the blind carbon copy (BCC) function, which would have concealed recipients’ email addresses from one another. As a result, individuals receiving the emails could see the contact information of all others on the distribution list.
Affected Individuals
The council confirmed that the emails contained updates relevant to Blue Badge holders, meaning that the exposed information was particularly sensitive. This has raised significant concerns among recipients, as one affected resident expressed feeling unsafe due to the disclosure of her status as a Blue Badge holder, which was previously known only to a select few in her life.
Council’s Response
In response to the incident, the City of York Council activated its data breach procedures and is conducting a risk assessment in accordance with guidance from the UK Information Commissioner’s Office (ICO). A spokesperson stated, “We’re working carefully to establish exactly what’s happened, alongside conducting a thorough risk assessment… to understand any potential impact on individuals.” However, the council has not disclosed the exact number of individuals affected or whether the breach was due to human error or a technical issue.
Next Steps and Investigation
The council is evaluating whether the incident requires notification to the ICO within the statutory 72-hour reporting window. The ICO has confirmed receipt of a data breach report regarding this matter and has closed the case after providing advice. The ongoing investigation aims to clarify the circumstances surrounding the breach and assess its implications for those affected.
This article was produced by NeonPulse.today using human and AI-assisted editorial processes, based on publicly available information. Content may be edited for clarity and style.
