Public Health Wales (PHW) has issued an apology and referred itself to the Information Commissioner’s Office after accidentally leaving the personal data of 18,105 individuals – everybody in Wales who tested positive for Covid-19 between 27 February and 30 August – exposed on a public server where it was searchable by any visitor to its website.
The leak occurred on the afternoon of 30 August 2020 and the data remained viewable for just under 24 hours, during which time it was viewed 56 times, said PHW.
