Posted: Mon 14th Sep 2020

1,410 Covid-19 positive people in Wrexham affected by Public Health Wales data breach

Wrexham.com for people living in or visiting the Wrexham area
This article is old - Published: Monday, Sep 14th, 2020

Public Health Wales say they “regret to announce” that there has been a data breach involving the personally identifiable data of Welsh residents who have tested positive for COVID-19.

In Wrexham 1,410 people who tested positive for coronavirus are stated as being affected by the breach, with only 1,463 people testing positive in Wrexham overall.

Public Health Wales say “A risk assessment has been conducted and legal advice has been sought, both of which advise that the risk of identification of the individuals affected by this data breach appears low.”

They explained, “The incident, which was the result of individual human error, occurred on the afternoon of 30 August 2020 when the personal data of 18,105 Welsh residents who have tested positive for COVID-19 was uploaded by mistake to a public server where it was searchable by anyone using the site. After being alerted to the breach we removed the data on the morning of 31 August. In the 20 hours it was online it had been viewed 56 times.”

“In the majority of cases (16,179 people) the information consisted of their initials, date of birth, geographical area and sex meaning that the risk they could be identified is low. However, for 1,926 people living in nursing homes or other enclosed settings such as supported housing, or residents who share the same postcode as these settings, the information also included the name of the setting. The risk of identification for these individuals therefore is higher but is still considered low.”

“There is no evidence at this stage that the data has been misused. However, we recognise the concern and anxiety this will cause and deeply regret that on this occasion we have failed to protect Welsh residents’ confidential information. Anyone concerned that their data or that of a close family member may have been breached and wanting advice should firstly read the FAQs at www.phw.nhs.wales then email us at [email protected] if they have any additional questions. People can also call Public Health Wales on 0300 003 0032 to discuss their concerns.”

The Information Commissioner’s Office and Welsh Government have been informed and an external investigation into the full circumstances surrounding the data breach and any lessons to be learned has been commissioned.

Number of affected people by local authority area

Tracey Cooper, Chief Executive of Public Health Wales said, “We take our obligations to protect people’s data extremely seriously and I am sorry that on this occasion we failed. I would like to reassure the public that we have in place very clear processes and policies on data protection. We have commenced a swift and thorough external investigation into how this specific incident occurred and the lessons to be learned.

“I would like to reassure our public that we have taken immediate steps to strengthen our procedures and sincerely apologise again for any anxiety this may cause people.”



Spotted something? Got a story? Email [email protected]



Have a look at...

Football Banning Order issued to Wrexham man for ‘pyro offences’

Ambulance Service ‘expecting the Bank Holiday period to be a busy one for us’

Reminder to check for Schools Essentials Grant before window closes at end of May

Wrexham AFC Women Awarded first UEFA License and FAW Tier 1 License renews for 2024/25 Season

“Disrespectful” easter egg hunt in cemetery cancelled after backlash

Free Easter Egg Hunt in Wrexham city centre tomorrow!

“No suspicious circumstances” say police after elderly woman found injured in Caia

Pilgrimage: The Road Through North Wales to launch on Good Friday

Fast-growing Wrexham bakery on the lookout for 20 new apprentices

A view from Wrexham’s Member of Parliament

Wrexham Police FC charity match raises thousands for boy with rare genetic condition

Moneypenny expands US services with acquisition of Sunshine Communication Services