National Health Service (NHS) staff struggled with the emotional toll of handling calls from patients affected by a data breach that exposed the health records of 8,003 individuals, according to The Register.
The breach occurred when the Royal Cornwall Hospitals NHS Trust inadvertently published an Excel workbook in response to a Freedom of Information request in February 2023. The file contained hidden pivot tables that revealed sensitive sickness absence records for staff and non-trust workers.
A member of the public discovered the exposure in November 2025. The subsequent helpline, staffed by clinical governance employees with minimal training, operated for 11 weeks. Handlers reported managing calls from distressed individuals, including those concerned about domestic safety, while simultaneously discovering their own data had been compromised.
The incident stemmed from procedural failures, including the use of an incorrect department to process the request and the omission of mandatory data sanitization steps like converting files to CSV. The trust has since implemented stricter approval processes, requiring senior information governance oversight for spreadsheet disclosures.
The Information Commissioner's Office has closed the case following the implementation of these corrective measures, and the trust has issued a formal apology to those affected.
Source: The Register
Kelley Damore is Chief Content Officer at CyberRisk Alliance, where she leads content strategy across the company’s digital brands, research, communities and live events serving CISOs and security practitioners. At CyberRisk Alliance, she is focused on delivering 365-day engagement, trusted journalism and actionable insights to help security leaders navigate an increasingly complex threat landscape.
Kelley Damore is Chief Content Officer at CyberRisk Alliance, where she leads content strategy across the company’s digital brands, research, communities and live events serving CISOs and security practitioners. At CyberRisk Alliance, she is focused on delivering 365-day engagement, trusted journalism and actionable insights to help security leaders navigate an increasingly complex threat landscape.
An error occurred trying to play the stream. Please reload the page and try again.
CloseRegistering with SC Media is 100% free. Join tens of thousands of cybersecurity leaders today and gain access to the latest analysis shaping the global infosec agenda.
