LISTEN: 'Procedural error' to blame for data breach identifying victims of historical abuse

By Q Radio News

A data breach affecting victims of historical institutional abuse has been described as "deeply regrettable"  in a new report by the Executive Office.

The investigation found that a procedural error led to individuals being identified in an email containing a newsletter which was sent to victims and survivors.

The recipients of the email were visible to all those who received it on May 22, 2020 after it was sent from the Interim Advocates office. 

The Group Internal Audit and Fraud Investigation Service was tasked by The Executive Office to carry out an independent investigation into the incident.  

The aim of the investigation was to establish the circumstances which led to the release of the e-mail addresses and make recommendations to address any system weaknesses that were identified during the investigation.

"The investigation concluded that the data breach was attributable to procedural error," a TEO spokesperson said. 

"A total of nine recommendations have been made to prevent a re-occurrence of this incident and to improve data protection and information management arrangements within the Interim Advocate’s Office.

"These are being taken forward as a matter of urgency by TEO."

Interim Advocate Brendan McAllister has welcomed the outcome of the independent investigation which found that the circulation of 251 email addresses to recipients was the result of a procedural error. 

Brendan McAllister

He says recommendations will be fully implemented.

“I welcome the speedy conclusion of this investigation because it has addressed concerns that have been raised since the data breach occurred and enables my colleagues to implement a small number of specific recommendations which should serve to reassure the people we are here to serve," Mr McAllister added. 

He also promised to contact all of those affected by the data breach to inform them of the steps that have been taken.

Chairperson of Stormont’s Executive Office scrutiny Committee Colin McGrath MLA has welcomed the publication of a report into a data breach at the office of the HIA Interim Advocate.

Mr McGrath said that the recommendations must be implemented in full.

“This report into the data breach that occurred in the Office of the HIA Interim Advocate is welcome and it’s important that the recommendations are implemented quickly to secure the confidence of victims and survivors who were left hurt and distressed.

“The private email addresses of victims and survivors should not have been circulated and I have been in touch with many of those who were deeply distressed after receiving the communication.

Colin McGrath

"They need to have confidence that renewed procedures are in place to prevent this from happening again and I would welcome an implementation timeline for the report recommendations.

“This matter has also been referred to the Information Commissioner’s Office and will be subject to a separate investigation which I look forward to seeing as soon as possible".