The are ever-increasing data security concerns in modern society as more and more data breaches are being seen in various organisations.
In recent times, there have been reports of data breaches with local UK councils, causing concerns about whether our personal data is actually safe and secure.
Security breaches have the potential to put thousands of people’s personal details at risk, potentially harming victims psychologically as well as financially.
Many people may not be aware that victims of such data breaches can qualify for compensation.
At Data Breach Claims, we conducted an investigation which revealed a stark increase both in terms of human error and cyber-attacks across UK councils.
An investigation by Data Breach Claims has revealed a stark increase both in terms of human error and cyber-attacks across UK councils.
One of our Data Breach Experts, Eleanor Coleman says: “This rise is worrying and we hope that organisations are ensuring that they have sufficient security in place to protect people’s personal information.”
Councils are expected to collect, store, use, share and dispose of personal information or data about individuals, in line with General Data Protection Regulation (GDPR) and the Data Protection Act (DPA).
According to the ICO (Information Commissioner’s Office), cyber attacks on local authority systems have increased by 24% between 2022 and 2023.
Personal data breaches reported by Local Governments, it confirms, have skyrocketed by 58% in the same time period.
How We Conducted Our Research Into Council Data Breaches
We sent out a series of Freedom of Information Requests to every UK Council asking for the number of both personal and cyber data breaches between 2021 up to March 2024.
Of these, County Councils reported the most overall data breaches with the highest number of claims brought against them.
We also asked how much each council has paid out in data breach compensation claims in the last three years.
From this, we have revealed the UK councils with the highest number of either personal data breaches or cyber attack incidents. We also uncovered with local authorities have paid out the highest and lowest amounts in data breach compensation.
Find your local council’s results below:
Results
Below, you can find the results of our research for each council, broken up in the following ways. Just click the links below to jump to the results:
- County Councils
- Unitary Authorities
- Metropolitan District Councils
- London Borough Councils
- Welsh Councils
County Councils
Of the 21 County Councils contacted, 15 (71%) responded to the request for information within the deadlines. The remaining councils have been contacted.
UK County Council Data Breach Claims
Devon County Council
Devon County Council has paid out an eye-watering £86,000 in compensation for data breach claims since 2021 amid a ‘worrying’ rise in both cyber and non-cyber security attacks.
It confirmed a total of 91 personal data breach incidents since 2021, with figures increasing year on year.
A total of 8 incidents were recorded between 2021/22, rising to 38 the following year. A further 45 were logged between 2023-March 2024 – that’s a staggering increase of 463% over the last three years.
Personal data breaches are defined as “any breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data.”
Data Breach Claims also asked the council how many cyber attacks it has had within the same time period.
While Devon Council confirmed it held the information, it did not disclose figures due to concerns that doing so “could be leveraged by a motivated cyber threat actor to inform a successful attack against our infrastructure.”
The Council did however confirm that it had paid out an eye-watering £86,000 in data breach claims compensation in the last three years – the highest amount reported out of all UK County Councils.
A total of £75,000 was paid out in 2021, followed by £2,500 in 2022. Another £2,000 was paid in 2023 as well as a further £6,500 this year so far, 2024.
Surrey County Council
Surrey County Council has paid out an eye-watering £78,000 in compensation for data breach claims since 2021.
It confirmed a total of 2,078 data breaches incidents including ‘near misses’ as recorded by its system.
The Council reported 665 incidents between 2021/22, a further 567 between 2022/23 and a whopping 846 incidents between 2023-March 2024.
That’s a staggering 49% increase in the number of recorded data breach incidents within just one year.
The Council confirmed it had paid out a hefty total of £67,500 in data breach claims between 2021/22. This was followed by a further £9,750 in 2022/23 and a further £750 between 2023 – March 2024.
It must be stressed that the majority of the data breach incidents recorded are likely to be for relatively minor issues. These could include emails being sent to the wrong recipient or incorrect disposal of paperwork.
Similarly, not all incidents are reported to the ICO – especially those deemed to have had no real, significant impact.
But those that merited a compensation amount would likely have been deemed substantial.
Lancashire County Council
Lancashire County Council has paid out an eye-watering £51,000 in compensation for data breach claims since 2021 amid a ‘worrying’ rise in both cyber and non-cyber security attacks.
It confirmed a total of 19 personal data breach incidents since 2021.
A total of 7 incidents were recorded between 2021/22, followed by another 7 breaches the following year. So far between 2023-March 2024, 5 incidents have been logged.
Data Breach Claims also asked the council how many cyber attacks it has had within the same time period.
Lancashire Council disclosed two cyber attacks in the past three years, both of which occurred between 2022/23.
It confirmed that a total of £51,099.25 has been paid out in compensation for data breach claims since 2021.
Between 2022/23, Lancashire Council paid out £13,500. This is followed by a whopping £35,599.25 in 2023/24.
East Sussex County Council
East Sussex Council has paid out £26,000 in compensation for data breach claims since 2021.
It confirmed a total of 1,415 data breach incidents in the last three years.
A total of 436 incidents were recorded between 2021/22, followed by 494 in 2022/23.
So far, between 2023- March 24, some 485 incidents have already been logged.
The majority of these are likely to be for relatively minor issues. These could include emails being sent to the wrong recipient or incorrect disposal of paperwork.
Similarly, not all incidents are reported to the ICO – especially those deemed to have had no real, significant impact.
Data Breach Claims also asked the council how many cyber attacks it has had within the same time period.
While East Sussex Council confirmed they did hold the information, it chose not to disclose figures due to concerns that it could potentially compromise its cyber security.
The Council did however confirm that it had paid out £26,250 in data breach claims compensation in the last three years.
A total of £18,000 was paid out between 2021/22, followed by £7,250 in 2022/23. A further £1,000 has been paid between 2023-March 2024.
Kent County Council
Kent Council has paid out thousands in compensation for data breach claims since 2021 amid a ‘worrying’ rise in both cyber and non-cyber security attacks across the UK.
It confirms being notified of a staggering 13 cyber attacks since 2021. The council has also recorded 2,452 data breach incidents in the last three years.
A total of 787 incidents were reported in 2021 as well as 768 the following year. A further 783 incidents were also logged in 2023.
So far in January and February 2024 alone, 114 data breach incidents have been confirmed by Kent Council.
We also asked the council how many cyber attacks it has had within the same time period.
Kent Council confirmed being ‘formally notified’ of a staggering 13 cyber attacks since 2021, with figures rising year on year.
One incident happened in 2021 followed by a further 4 cyber security breach incidents in 2022.
Six more cyber attacks were confirmed by the council in 2023 as well as a further 2 between January and February, 2024.
The Kent local authority also revealed it has paid out a total of £16,350 in compensation for data breach claims that have been reported to have occurred between April 1, 2021 and March 31, 2024.
Suffolk County Council
Suffolk Council has paid out more than £17,000 in compensation for data breach claims since 2021 amid a ‘worrying’ rise in both cyber and non-cyber security attacks across the UK.
It confirmed a total of 321 personal data breaches between 2023/24 alone.
Figures for previous years could not be disclosed due a change in recording methods, the council confirms.
Suffolk Council said it had one cyber attack in the last three years which happened between 2022/23.
The local authority revealed it has paid out a total of £17,350 in compensation for data breach claims since 2021.
Between 2022/23, the council forked out £15,350 followed by a further £2,000 between 2023 – March 2024.
Essex County Council
Essex Council has paid out thousands in compensation for data breach claims since 2021 amid a ‘worrying’ rise in both cyber and non-cyber security attacks across the UK.
It confirms receiving a staggering 2,895 general cyber security incidents since 2021, with figures rising each year.
This is an addition to 83 data breach incidents and a further 804 ‘minor’ data breaches in the last three years.
Of the 2,895 general cyber security incidents, a total of 14 were reported between 2021/22, soaring to 723 the following year.
Between 2023/24, the council logged 2,158 general cyber security incidents – a staggering rise of 198% compared to the previous year.
Separately, the council revealed it had received 83 Data Breach Incidents in the last three years, with figures increasing each year.
23 were received in 2021/22, followed by 41 in 2022/23 and 19 between 2023- March 2024.
The local authority also confirmed 270 personal data breaches between 2021/22 where information was not made public or had been contained within the Essex County Council Network.
Such incidents, it added, include emails sent internally to a wrong employee or data stored/saved incorrectly within the Essex network.
A further 276 such incidents were logged between 2022/23 as well as 258 more in 2023/24.
It must be stressed that the majority of these are likely to be for relatively minor issues. These could include emails being sent to the wrong recipient or incorrect disposal of paperwork.
Similarly, not all incidents are reported to the ICO – especially those deemed to have had no real, significant impact.
However, we also asked the council for the amount of compensation it had paid out for claims in the last three years.
Essex County Council confirmed a payout of £3,500 between 2022/23 followed by £11,500 between 2023/24.
Cambridgeshire County Council
(Between April 2021- March 2024)
Number of data breach incidents: 761
Number of cyber related breaches: 6
Amount paid out in compensation: £2,750
Hampshire County Council
(Between April 2021- March 2024)
Number of data breach incidents: 15* as defined by Article 33 of UKGDPR
Number of cyber related breaches: 1
Amount paid out in compensation: £12,200
Leicestershire County Council
(Between April 2021- March 2024)
Number of data breach incidents: 674
Number of cyber related breaches: 7
Amount paid out in compensation: £0
Lincolnshire County Council
(Between April 2021- March 2024)
Number of data breach incidents: 646
Number of cyber related breaches: 0
Amount paid out in compensation: £6,000
Norfolk County Council
Norfolk County Council has paid out £20K in compensation for data breach claims since 2021.
It confirmed a total of 1,656 data breach incidents since 2021 with figures rising year on year.
Between 2021/22, the council recorded 408 incidents, as well as 464 the following year. A further 637 were logged in 2023. This year, between January-March 2024, the council has recorded 147 already so far.
The Council revealed it had not had any cyber data breach incidents in the last three years.
The authority did however confirm that it has paid out a total of £20,000 in compensation for data breach claims since 2021.
Between 2021/22, £5,000 was paid out, followed by £5,000 the year after. Between 2023 and March 2024, a further £10,000 has been paid.
Staffordshire County Council
(Between April 2021- March 2024)
Number of data breach incidents: 1,317
Number of cyber related breaches: 8
Amount paid out in compensation: £162,807.58
Warwickshire County Council
Warwickshire County Council has paid out £4K in compensation for data breach claims since 2021 and confirmed 58 cyber incidents in the last three years.
It confirmed a total of 1,313 data breach incidents since 2021 with figures rising year on year.
Between 2021/22, the council recorded 350 incidents, increasing to 451 the following year. A further 512 were logged between 2023-March 2024.
Warwickshire Council confirmed that of those 1,313 incidents, 58 of them were ‘cyber incidents.
The authority recorded 6 cyber incidents between 2021/22, which increased to 31 the following year. Between 2023/March 24, 21 cyber incidents have been logged so far.
In the last three years, the council has paid out a total £4,000 in compensation for data breach claims – £2,000 in 2021/22 and £2,000 in 2022/23.
Unitary Authorities
Cheshire and West Chester Council
Cheshire and West Chester Council has paid an eye-watering £185k in compensation for data breach claims since 2021.
It reported the highest figures in England.
The council has paid out more compensation for data breach claims than any other council in England despite the fact that it did not report the highest number of data breach incidents.
Cheshire and West Chester Council confirmed a total of 572 data breach incidents since 2021.
A total of 228 incidents were recorded between 2021/22, as well as a further 195 in 2022/23. Some 149 data breach incidents have been logged between 2023 – March 2024 so far.
Cheshire and West Chester Council confirmed that it has not had any cyber incidents since 2021. However, it did reveal that a total of £185,239 has been paid in data breach compensation claims in the last three years.
A total of £85,205 was paid out between 2021/22, followed by £51,530 the next year. Another £48,504 has been paid out between 2023-March 2024 this year so far.
Central Bedfordshire Council
Central Bedfordshire Council has paid out £70k in compensation for data breach claims since 2021, reporting the second highest figures out of all Unitary Authorities.
The Council confirmed a total of 271 data breach incidents since 2021, with figures rising year on year.
A total of 114 incidents were recorded in 2021, increasing to 136 in 2022. A further 200 data breach incidents were logged in 2023 – that’s a 75% rise in the last three years.
Central Bedfordshire Council confirmed that it had one cyber incident during that time which happened in 2022.
The local authority revealed it had paid out a total of £70,650 in data breach compensation claims between April 1, 2021 and February 2024 – marking the second highest Unitary Authority figures.
Hull City Council
Hull City Council has paid a staggering £30k in compensation for data breach claims since 2021.
The local authority confirmed it had 9 cyber security incidents in the last three years, five of which were phishing attacks, which are scams where attacks deceive people into revealing sensitive information.
The Council confirmed a total of 712 data breach incidents since 2021, with 491 incidents upheld.
Figures reported by the Hull have been rising year on year. Between 2021/22, 196 data breach incidents were logged with 133 upheld. The following year, there were 256 and 181 upheld.
Between 2023/24, there 260 incidents logged by the council, with 177 upheld.
We asked the council how many cyber attacks it has had within the same time period, to which it confirmed a total of nine in the last three years.
Between 2021/22, Hull City Council confirmed it experienced one 3rd party breach.
In 2022/21, it recorded 7 cyber security incidents. Five of these were phishing attacks
Phishing is a form of social engineering and scam where attackers deceive people into revealing sensitive information or installing malware such as ransomware.
The council also confirmed one incident of ‘intrusion’ which is when a hacker gains, or attempts to gain, access to a system without having permission to do so.
In the same year, Hull City Council logged another 3rd party breach.
Another phishing attack was confirmed by the local authority between 2023/24.
In the past three years, since 2021, the council has paid out a total of £30,800 in data breach claims.
In 2021/22, it paid out £23,300 followed by £3,500 in 2022/23. So far this financial year Hull has confirmed a total pay out of £4,000.
Bath and North East Somerset Council
Bath and North East Somerset Council has paid an eye-watering £46k in compensation for data breach claims since 2021 amid a ‘worrying’ rise in both cyber and non-cyber security attacks across the UK.
The Council confirmed a total of 472 data breach incidents since 2021.
A total of 118 incidents were recorded between 2021/22, increasing to 188 in 2022/23. A further 166 breaches have been logged by the council so far between 2023-March 2024.
Bath and North East Somerset Council confirmed that it has not had any cyber attack in the last three years.
However, the authority did confirm that it had paid out a hefty total of £46,909 in data breach compensation claims since 2021 – marking the third highest figures out of all unitary authorities in England.
Nottingham City Council
Nottingham City Council has paid an eye-watering £29k in compensation for data breach claims since 2021 amid a ‘worrying’ rise in both cyber and non-cyber security attacks across the UK.
The Council confirmed a total of 533 data breach incidents since 2021 with figures rising year on year.
A total of 158 incidents were recorded between 2021/22, increasing to 179 in 2022/23. A further 196 breaches have been logged by the council so far between 2023-March 2024.
Nottingham City Council confirmed it does not specifically record if a Data Breach or Incident is a cyber incident and therefore, could not provide figures like other councils who responded to our investigation.
However, the authority did confirm that it had paid out a hefty total of £29,850 in data breach compensation claims since 2021.
Between 2021/22, a total of £16,500 was paid out by the council, as well as £5,850 the following year. So far, £7,500 has been paid out in 2023-March 2024.
Wiltshire Council
Wiltshire Council has paid out £19K in compensation for data breach claims since 2021 amid a ‘worrying’ rise in both cyber and non-cyber security attacks across the UK.
The Council confirmed a total of 2,383 data breach incidents over the last three years.
Of those, 2,061 are logged as ‘near misses.’ A further 42 were internal data breaches and 280 were external breaches.
Figures for external breaches are worryingly rising year on year. Wiltshire Council recorded 73 between 2021/22, rising to 103 the following year.
Between 2023-March 2024 so far, it has logged 104 external breaches already.
Wiltshire Council confirm a total of 5 cyber attacks in the last three years. One recorded in 2021/22 and another in 2022/23. So far between 2023 and March 2023, three cyber incidents have been logged.
The authority also confirmed it had paid out a hefty total of £19,150 since 2021. In 2021/22, it paid out £9,500 as well as £9,650 the next year.
Cornwall Council
Cornwall Council has paid out a total of £7,000 in the last three years in data breach claims.
It revealed that 14 personal data breach incidents had taken place since 2021.
A total of 4 incidents were recorded between 2021/22, followed by another 3 in 2022/23.
So far between 2023-March 2024, 7 incidents have already been confirmed by the local authority.
The Finance and Assurance Service within the Council told us that £3,000 was paid out in 2021/22 for one data breach claim. A further £1,000 was paid in 2022/23 for another claim.
A total of £3,000 has been paid by the Council so far this year for two data breach claims, it confirms.
We also asked the council how many cyber attacks it has had within the same time period.
Cornwall Council revealed it had not had any cyber attacks between 2021 and March 2024.
Brighton & Hove City Council
Brighton & Hove City Council has paid out £17.5K in compensation for data breach claims.
The Council confirmed a total of 570 data breach incidents over the last three years.
Between 2021/22, the council recorded 205 incidents, as well as 184 the following year. A further 181 were logged between April 2023 and March 24.
We also asked the council how many cyber attacks it has had within the same time period.
It neither confirmed nor denied whether it holds the information on the grounds that it could potentially jeopardise future detection or prevention of crime.
However, the authority did confirm that it has paid out a total of £17,500 in compensation for data breach claims since 2021.
In 2021/22, the council paid out a total of £10,000. A further £7,500 was paid between 2022/23.
Plymouth City Council
Plymouth City Council has paid out £12K in compensation for data breach claims since 202.
It confirmed a total of 6 data breach incidents, serious enough to report to the ICO, over the last three years.
Between 2021/22, the council recorded one incident, as well as three the following year. A further two were logged between April 2023 and March 24.
Plymouth Council confirmed one cyber data breach incident which happened between 2023- March 24.
It also revealed that a total sum of £12,050 has been paid out in compensation for data breach claims in the last three years.
In 2021/22, the authority paid out £6,250 as well as £5,800 the following year.
Darlington Borough Council
(Between April 2021- March 2024)
Number of data breach incidents: 174
Number of cyber related breaches: 0
Amount paid out in compensation: £18,000
Shropshire Council
(Between April 2021- March 2024)
Number of data breach incidents: 482
Number of cyber related breaches: 0
Amount paid out in compensation: £15,000
East Riding of Yorkshire Council
(Between April 2021- March 2024)
Number of data breach incidents: 798
Number of cyber related breaches: 0
Amount paid out in compensation: £18,350
Torbay Council
(Between April 2021- March 2024)
Number of data breach incidents: 336
Number of cyber related breaches: 0
Amount paid out in compensation: £18,847
Cheshire East Council
(Between April 2021- March 2024)
Number of data breach incidents: 605
Number of cyber related breaches: 8
Amount paid out in compensation: £10,000
Leicester City Council
Leicester City Council has paid out £6K in compensation for data breach claims since 2021 and confirmed 9 cyber incidents in the last three years.
In March 2024, the council confirmed that cyber security experts and police informed that another batch, some 1.3 terabytes, of stolen data had been published following a cyber attack. This is in addition to around 25 documents that were published in late February.
Leicester City Council confirmed a total of 964 data breach incidents in the last three years.
Between 2021/22, the council recorded 313 incidents, as well as 255 the following year. A further 324 were logged in 2023 and so far this year (up to March 24), there have been 72.
Leicester Council confirmed a total of 9 cyber incidents in the last three years. Two incidents were logged every year in 2021, 2022 and 2023, all third party contractors, the council adds.
Three cyber incidents have taken place so far this year already. The Local Authority confirmed that two were third party contractors and one was an internal data breach.
The council has paid out a total of £5,978 in compensation for data breach claims since 2021.
North Somerset Council
(Between April 2021- March 2024)
Number of data breach incidents: 229
Number of cyber related breaches: 2
Amount paid out in compensation: £0
Peterborough City Council
(Between April 2021- March 2024)
Number of data breach incidents: 297
Number of cyber related breaches: 3
Amount paid out in compensation: £4,500
Portsmouth City Council
(Between April 2021- March 2024)
Number of data breach incidents: 387
Number of cyber related breaches: 2
Amount paid out in compensation: £0
Thurrock Council
(Between April 2021- March 2024)
Number of data breach incidents: 71
Number of cyber related breaches: 2
Amount paid out in compensation: £150
West Northamptonshire Council
(Between April 2021- March 2024)
Number of data breach incidents: 454
Number of cyber related breaches: 7
Amount paid out in compensation: £0
Wokingham Borough Council
(Between April 2021- March 2024)
Number of data breach incidents: 17
Number of cyber related breaches: 12
Amount paid out in compensation: £0
Metropolitan District Councils
North Tyneside Borough Council
North Tyneside Borough Council has paid out £65K in compensation for data breach claims since 2021.
It is the second highest amount paid out of all UK Metropolitan District Councils.
Data obtained through a series of Freedom of Information Requests to every UK Council reveals that North Tyneside reported the second highest compensation figures out of any UK Metropolitan District Council.
The Local Authority came behind Coventry Council, which reported a pay out of £92K. The third highest Metropolitan Council figures were from Sefton Council which paid £40K.
Of the 36 UK Metropolitan District Councils, 75% responded within the deadline.
North Tyneside Council confirmed a total of 572 data breach incidents since 2021 with figures increasing year on year.
Between 2021/22, the council recorded 168 incidents, as well as 173 the following year.
So far, between 2023-March 2024, some 231 data breach incidents have been logged already.
North Tyneside Council confirmed it has not had any cyber data breaches in the last three years.
The Local Authority did however, confirm it has paid out a total of £65,340.40 in compensation for data breach claims since 2021.
Between 2021/22, it paid out £11,097.40. This is followed by a further £54,243 in 2022/23.
Barnsley Borough Council
(Between April 2021- March 2024)
Number of data breach incidents: 653
Number of cyber related breaches: 0
Amount paid out in compensation: N/A
Bury Borough Council
(Between April 2021- March 2024)
Number of data breach incidents: 653
Number of cyber related breaches: 0
Amount paid out in compensation: N/A
Sefton Borough Council
Sefton Borough Council has paid out £40K in compensation for data breach claims since 2021.
It is the third highest amount paid out of all UK Metropolitan District Councils.
The Local Authority came behind Coventry Council, which reported a pay out of £92K. The second highest Metropolitan Council figures were from North Tyneside Council which paid £65K.
Sefton Council confirmed a total of 201 data breach incidents since 2021 with figures increasing year on year.
Between 2021/22, the council recorded 48 incidents, as well as 67 the following year.
So far, between 2023-March 2024, some 86 data breach incidents have been logged already.
Sefton Council confirmed it has not had any cyber data breaches in the last three years.
The Local Authority did however, confirm it has paid out a staggering total of £40,100 in compensation for data breach claims since 2021.
Between 2021/22, it paid out £600. This is followed by a further £37,250 in 2022/23.
So far, the council has paid out £2,250 for such claims between 2023-March 2024.
Calderdale Borough Council
Calderdale Borough Council has paid out £24k in compensation for data breach claims since 2021 amid a ‘worrying’ rise in both cyber and non-cyber security attacks across the UK.
In the last three years, it confirmed a total of 468 data breach incidents with figures increasing year on year.
Between 2021/22, the council recorded 65 incidents, as well as 80 the following year.
So far, between 2023-March 2024, some 111 data breach incidents have been logged already.
Calderdale Council revealed it has not had any cyber data breaches in the last three years.
The Local Authority did however, confirm it has paid out a total of £24,250 in compensation for data breach claims since 2021.
Between 2021/22, it paid out £16,750. This is followed by a further £7,500 in 2023-March 2024.
Doncaster Borough Council
Doncaster Borough Council has paid out £15K in compensation for data breach claims since 2021 amid a ‘worrying’ rise in both cyber and non-cyber security attacks across the UK.
In the last three years, it confirmed a total of 282 data breach incidents with figures increasing year on year.
Between 2021/22, the council recorded 94 incidents, as well as 74 the following year.
So far, between 2023-March 2024, some 114 data breach incidents have been logged already.
Doncaster Council neither confirmed nor denied whether it holds the information on the grounds that it could potentially jeopardise future detection or prevention of crime.
The Local Authority did however, confirm it has paid out a total of £15,000 in compensation for data breach claims since 2021.
Between 2021/22, it paid out £11,000. This is followed by a further £4,500 in 2022/23.
Dudley Borough Council
(Between April 2022- March 2024)
Number of data breach incidents: 213
Number of cyber related breaches: 0
Amount paid out in compensation: £0
Gateshead Borough Council
(Between April 2021- March 2024)
Number of data breach incidents: 324
Number of cyber related breaches: 0
Amount paid out in compensation: £8,500
Kirklees Borough Council
(Between April 2021- March 2024)
Number of data breach incidents: 924
Number of cyber related breaches: 0
Amount paid out in compensation: £6,750
Liverpool City Council
(Between April 2021- March 2024)
Number of data breach incidents: 38
Number of cyber related breaches: N/A
Amount paid out in compensation: £0
Newcastle Upon Tyne City Council
(Between April 2021- March 2024)
Number of data breach incidents: 174
Number of cyber related breaches: 0
Amount paid out in compensation: £0
Rochdale Borough Council
(Between April 2021- March 2024)
Number of data breach incidents: 280
Number of cyber related breaches: 4
Amount paid out in compensation: N/A
Rotherham Borough Council
(Between April 2021- March 2024)
Number of data breach incidents: 404
Number of cyber related breaches: 2
Amount paid out in compensation: N/A
South Tyneside Borough Council
(Between April 2021- March 2024)
Number of data breach incidents: 104
Number of cyber related breaches: 0
Amount paid out in compensation: £0
Solihull Borough Council
(Between April 2021- March 2024)
Number of data breach incidents: 332
Number of cyber related breaches: 0
Amount paid out in compensation: £0
Stockport Borough Council
(Between April 2021- March 2024)
Number of data breach incidents: 356
Number of cyber related breaches: 0
Amount paid out in compensation: £0
Trafford Borough Council
(Between April 2021- March 2024)
Number of data breach incidents: 199
Number of cyber related breaches: N/A
Amount paid out in compensation: £11,800.50
Wakefield City Council
(Between April 2021- March 2024)
Number of data breach incidents: 848
Number of cyber related breaches: 1
Amount paid out in compensation: £13,250
Wigan Borough Council
(Between April 2021- March 2024)
Number of data breach incidents: 405
Number of cyber related breaches: 0
Amount paid out in compensation: £12,000
London Borough Councils
We sent Freedom of Information Requests to every London Borough Council. Of the 32 councils, 78% responded to the request within the deadline. Eight councils denied the request for reasons including; security concerns (for example, concerns that divulging information would jeopardise future cyber safety). See the results below:
Barking and Dagenham Council
(Between April 2021- March 2024)
Number of data breach incidents: 207
Number of cyber related breaches: 3
Amount paid out in compensation: £0
Barnet
(Between April 2021- March 2024)
Number of data breach incidents: 307
Number of cyber related breaches: 5
Amount paid out in compensation: £3,000
Bexley
(Between April 2021- March 2024)
Number of data breach incidents: 84
Number of cyber related breaches: 2
Amount paid out in compensation: £0
Brent
(Between April 2021- March 2024)
Number of data breach incidents: 225
Number of cyber related breaches: 0
Amount paid out in compensation: £5,000
Bromley
(Between April 2021- March 2024)
Number of data breach incidents: 139
Number of cyber related breaches: 1
Amount paid out in compensation: £89,500
Greenwich
(Between April 2021- March 2024)
Number of data breach incidents: 200
Number of cyber related breaches: NP
Amount paid out in compensation: £2,000
Haringey
(Between April 2021- March 2024)
Number of data breach incidents: 223
Number of cyber related breaches: NP
Amount paid out in compensation: NP
Hounslow
(Between April 2021- March 2024)
Number of data breach incidents: 385
Number of cyber related breaches: NP
Amount paid out in compensation: £0
Islington
(Between April 2021- March 2024)
Number of data breach incidents: 564
Number of cyber related breaches: 0
Amount paid out in compensation: £0
Lewisham
(Between April 2021- March 2024)
Number of data breach incidents: 188
Number of cyber related breaches: 3
Amount paid out in compensation: £0
Merton
(Between April 2021- March 2024)
Number of data breach incidents: 357
Number of cyber related breaches: 11
Amount paid out in compensation: £0
Redbridge
(Between April 2021- March 2024)
Number of data breach incidents: 301
Number of cyber related breaches: 18
Amount paid out in compensation: £0
Tower Hamlets
(Between April 2021- March 2024)
Number of data breach incidents: 564
Number of cyber related breaches: 177
Amount paid out in compensation: £0
Welsh Councils
Of the 22 Welsh Councils, 86% responded to our Freedom of Information Request. One council denied the request due to security concerns.
Blaenau Gwent County Borough Council
(Between April 2021- March 2024)
Number of data breach incidents: 104
Number of cyber related breaches: 0
Amount paid out in compensation: £0
Bridgend County Borough Council
(Between April 2021- March 2024)
Number of data breach incidents: 11
Number of cyber related breaches: 0
Amount paid out in compensation: £1,500
Caerphilly County Borough Council
(Between April 2021- March 2024)
Number of data breach incidents: 252
Number of cyber related breaches: NP
Amount paid out in compensation: NP
Ceredigion County Council
(Between April 2021- March 2024)
Number of data breach incidents: 126
Number of cyber related breaches: 2
Amount paid out in compensation: £0
Denbighshire County Council
(Between April 2021- March 2024)
Number of data breach incidents: 96
Number of cyber related breaches: 2
Amount paid out in compensation: £0
Flintshire County Council
(Between April 2021- March 2024)
Number of data breach incidents: 304
Number of cyber related breaches: NP
Amount paid out in compensation: NP
Gwynedd County Council
(Between April 2021- March 2024)
Number of data breach incidents: 123
Number of cyber related breaches: NP
Amount paid out in compensation: NP
Isle of Anglesey County Council
(Between April 2021- March 2024)
Number of data breach incidents: 3
Number of cyber related breaches: 1
Amount paid out in compensation: NP
Merthyr Tydfil County Borough Council
(Between April 2021- March 2024)
Number of data breach incidents: 79
Number of cyber related breaches: NP
Amount paid out in compensation: £0
Monmouthshire County Council
(Between April 2021- March 2024)
Number of data breach incidents: 166
Number of cyber related breaches: NP
Amount paid out in compensation: NP
Neath Port Talbot County Borough Council
(Between April 2021- March 2024)
Number of data breach incidents: 267
Number of cyber related breaches: 0
Amount paid out in compensation: £0
Newport City Council
(Between April 2021- March 2024)
Number of data breach incidents: NP
Number of cyber related breaches: NP
Amount paid out in compensation: £9,000
Pembrokeshire County Council
(Between April 2021- March 2024)
Number of data breach incidents: 597
Number of cyber related breaches: 0
Amount paid out in compensation: £0
Powys County Council
(Between April 2021- March 2024)
Number of data breach incidents: 516
Number of cyber related breaches: 6
Amount paid out in compensation: £11,300
Swansea City and Borough Council
(Between April 2021- March 2024)
Number of data breach incidents: 237
Number of cyber related breaches: 0
Amount paid out in compensation: £0
Torfaen County Borough Council
(Between April 2021- March 2024)
Number of data breach incidents: 281
Number of cyber related breaches: 16
Amount paid out in compensation: £9,000
Vale of Glamorgan Council
(Between April 2021- March 2024)
Number of data breach incidents: 171
Number of cyber related breaches: NP
Amount paid out in compensation: £95,200
Wrexham County Borough Council
(Between April 2021- March 2024)
Number of data breach incidents: 532
Number of cyber related breaches: 10
Amount paid out in compensation: NP
Get Help Claiming Compensation For A Data Breach
If you’ve suffered damage either to your finances or mental health because of a council data breach, we can help.
We offer a free case check to see if you could be entitled to data breach compensation. The advice we provide is free of charge and carries no obligation to make a claim.
To get in tocuh, you can message us via our live chat box or call our free helpline above