ICO to investigate risk to police officers after Northern Ireland data breach – Source: www.theguardian.com

The UK’s Information Commissioner’s Office has launched an investigation into an unprecedented data breach that disclosed details of more than 10,000 police officers and staff in Northern Ireland.

The agency, which regulates data privacy laws, is working with the Police Service of Northern Ireland to establish the level of risk amid warnings that the leak may compel officers to leave the force or move addresses.

“This incident raises serious concerns as it shows how even the smallest of human errors can have major consequences,” the ICO said in a statement on Wednesday. “The incident demonstrates just how important it is to have robust measures in place to protect personal information, especially in a sensitive environment.”

Political leaders and police representatives in the region are grappling with the security and financial implications of an error that could expose officers, including those who work undercover, to terrorist intimidation and attack.

Officers were frightened and their friends and family were in “jeopardy”, said Naomi Long, the leader of the Alliance party who served as justice minister from 2020 to 2022.

She said it would be all but impossible to eradicate the digital footprint of the data breach, which gave the rank and grade data of all employees at the PSNI, including surnames, initials and what department they work in.

“These are people, both staff and officers, who put themselves at risk in order to keep the rest of us safe and the organisation has failed to protect their data and keep them safe,” she told the BBC.

Liam Kelly, the chair of the Police Federation for Northern Ireland, said many officers went to great lengths to shield their identities, in some cases not telling friends and associates that they were in the police. “I’ve been personally inundated with officers who are outlining that they are shocked, dismayed and basically angry that this has happened,” he said.

Kelly said the federation would consider legal action once the police investigation into what has been categorised as a critical incident concluded. “The trust from our officers is broken by this.”

Some officers in sensitive roles might need to change posts and move home, he told RTÉ. “At the very top end of the spectrum, we could have officers who potentially may have to relocate – not only from their workplace but from their home address – if their information has gone into the hands of people who intend to cause them harm.”

Gerry Kelly, a Sinn Féin assembly member, said the data breach could put lives in danger. Chris Heaton-Harris, the Northern Ireland secretary, also expressed deep concern.

Earlier this week the UK election watchdog also had a serious data breach.

The PSNI blamed human error for releasing an Excel spreadsheet – in response to a freedom of information request – that was published on an FoI website called WhatDoTheyKnow on Tuesday at about 2.30pm. The spreadsheet did not give home addresses. It was removed about two hours later after police discovered the mistake. Chris Todd, a PSNI assistant chief constable, has apologised and said the error was unacceptable.

An emergency meeting of the Policing Board of Northern Ireland, which oversees the force, is to be held on Thursday. Tom Kelly, a former board member, called on the chief constable, Simon Byrne, who is holiday, to resign. Mike Nesbitt, the Ulster Unionist representative on the board, counselled against “kneejerk” reaction.

During the Troubles, republican and at times loyalist paramilitaries targeted members of the Royal Ulster Constabulary, killing more than 300. Officers sought to conceal their profession – they would not, for instance, hang uniforms out to dry.

The PSNI, which replaced the RUC, has faced a lower level but chronic threat from dissident republicans. In February gunmen shot and severely wounded DCI John Caldwell at a sports complex in Omagh, Co Tyrone. In March authorities raised the terrorism threat level from substantial to severe, meaning the chances of an attack were deemed highly likely.

The summer marching season has passed relatively quietly but police are investigating reports that shots were fired on Tuesday during a second night of disturbances in the Galliagh area of Derry. Vehicles including a bus were hijacked and set on fire.