On 14 September 2020, Public Health Wales announced it has suffered a data breach caused by a human error, occurred on the afternoon of 30 August 2020, when the personal data of 18,105 Welsh residents tested positive for COVID-19 was uploaded by mistake to a public server where it was searchable by anyone using the site.
According to the Public Health Wales press release, the data was removed on the morning of 31 August and has been had been viewed for 56 times while the data was online.
The ICO and Welsh Government have been informed.
The press release is available here.
