🟠 High | Source: The Register — Security
The Metropolitan Police disclosed a victim’s new address and phone number directly to her stalker, constituting two preventable data breaches. The UK’s data protection watchdog has ordered the Met to improve its data handling safeguards. The incidents highlight serious failures in internal data access controls and disclosure processes within a law enforcement context.
Security Architect’s Take: Use this case as a prompt to audit your own organisation’s data access controls, particularly around sensitive personal data — ensure role-based access is strictly enforced, disclosure workflows require multi-party authorisation, and audit logs are routinely reviewed to detect inappropriate access before harm occurs.
Original advisory: London cops handed victim’s new address and number to her stalker, watchdog says