The Charring Cross Gender Identity Clinic in London sent out a mass email about an art competition to patients and forgot to blind copy the details of other patients.
This meant everyone on the email list going through or considering gender therapy could see each other’s email address.
Tavistock and Portman NHS Trust, which runs the clinic, admitted the ‘serious data breach’ affected up to 2,000 people.
Join Us On LinkedIn
Join the Cybersecurity and Incident Response Group on LinkedIn