COVID-19 Testing Data Breach – Statement and FAQs

Public Health Wales (PHW) has today announced that there has been a data breach involving the personally identifiable data of Welsh residents who have tested positive for COVID-19.

The incident occurred on the afternoon of 30 August 2020 when the personal data of 18,105 Welsh residents who have tested positive for COVID-19 was uploaded by mistake to a public server where it was searchable by anyone using the site. After being alerted to the breach, PHW removed the data on the morning of 31 August. In the 20 hours it was online it had been viewed 56 times.

You can view a full statement about the breach and some Frequently Asked Questions on the PHW website here.