{"id":735,"date":"2018-12-03T14:10:18","date_gmt":"2018-12-03T14:10:18","guid":{"rendered":"https:\/\/www.databreachlawyers.co.uk\/news\/?p=735"},"modified":"2018-12-03T14:10:18","modified_gmt":"2018-12-03T14:10:18","slug":"york-council-data-breach","status":"publish","type":"post","link":"https:\/\/www.databreachlawyers.co.uk\/news\/york-council-data-breach","title":{"rendered":"York Council data breach"},"content":{"rendered":"<p>The York City Council data breach revealed at the end of November appears to be another avoidable breach from a local authority.<\/p>\n<p>In this incident, an IT expert inadvertently stumbled across a huge vulnerability in the York City Council\u2019s environmental app, named One Plant York. The app, which has since been taken down, had some 6,000 users and was aimed at promoting environmental protection. Unfortunately, a vulnerability in the app\u2019s coding led to the personal and private information of the 6,000 users being compromised.<\/p>\n<p><!--more--><\/p>\n<h3><strong>6,0000 affected by the York Council data breach<\/strong><\/h3>\n<p>A huge 6,000 people were affected by the York Council data breach. An IT expert stumbled across the coding vulnerability and notified the council by sending a redacted sample of the compromised data to them.<\/p>\n<p>The council initially reported him to the police, despite the IT expert acting in good faith in telling them (a \u2018white hat hack\u2019 of sorts). They have since reportedly thanked him and apologised for reporting him.<\/p>\n<h3><strong>What data was compromised in the York Council data breach?<\/strong><\/h3>\n<p>The data compromised in the York Council data breach included:<\/p>\n<ul>\n<li>User IDs;<\/li>\n<li>Usernames;<\/li>\n<li>Passwords (understood to be in an encrypted format);<\/li>\n<li>Telephone numbers;<\/li>\n<li>Email addresses;<\/li>\n<li>Addresses;<\/li>\n<li>References for properties;<\/li>\n<li>Location and settings;<\/li>\n<li>Information about \u2018Planet points\u2019 (an in-app feature).<\/li>\n<\/ul>\n<p>This is enough information for someone with bad intentions to do some serious damage. In the wrong hands, a little data can go along way. That\u2019s why it\u2019s so important for data controllers to look after the data they hold. The consequences can include GDPR fines and <a href=\"https:\/\/www.databreachlawyers.co.uk\/can-i-claim\" target=\"_blank\" rel=\"noopener\"><strong>claims for compensation<\/strong><\/a>.<\/p>\n<h3><strong>Another council data breach<\/strong><\/h3>\n<p>The York Council data breach is yet another local authority data breach. They are quite common, and we represent a lot of people with <a href=\"https:\/\/www.databreachlawyers.co.uk\/can-i-claim\" target=\"_blank\" rel=\"noopener\"><strong>compensation cases for damages<\/strong><\/a> as a victim of a council data breach.<\/p>\n<p>We offer <a href=\"https:\/\/www.databreachlawyers.co.uk\/no-win-no-fee\" target=\"_blank\" rel=\"noopener\"><strong>No Win, No Fee<\/strong><\/a> representation for select council data breaches we take forward. We do this where we\u2019re confident enough that there is a claim to answer for.<\/p>\n<p>Councils and outsourced local authority agencies hold a lot of personal and sensitive data about people. It must be properly protected to avoid the distress associated with a data breach incident.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The York City Council data breach revealed at the end of November appears to be another avoidable breach from a local authority. In this incident, an IT expert inadvertently stumbled across a huge vulnerability in the York City Council\u2019s environmental app, named One Plant York. The app, which has since been taken down, had some &hellip; <a href=\"https:\/\/www.databreachlawyers.co.uk\/news\/york-council-data-breach\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">York Council data breach<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":299,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[18,3,50],"tags":[51,52,35,7],"class_list":["post-735","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-apps","category-claims","category-council-data-breaches","tag-apps","tag-council-data-breach","tag-data-breach","tag-personal-data"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>York Council data breach - Data Breach Lawyers<\/title>\n<meta name=\"description\" content=\"The York City Council data breach revealed at the end of November appears to be another avoidable breach from a local authority.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.databreachlawyers.co.uk\/news\/york-council-data-breach\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"York Council data breach - Data Breach Lawyers\" \/>\n<meta property=\"og:description\" content=\"The York City Council data breach revealed at the end of November appears to be another avoidable breach from a local authority.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.databreachlawyers.co.uk\/news\/york-council-data-breach\" \/>\n<meta property=\"og:site_name\" content=\"Data Breach Lawyers\" \/>\n<meta property=\"article:published_time\" content=\"2018-12-03T14:10:18+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i1.wp.com\/www.databreachlawyers.co.uk\/news\/wp-content\/uploads\/2017\/05\/security-experts-mobile-breaches-min.png?fit=1200%2C300&ssl=1\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"300\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Matt\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Matt\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.databreachlawyers.co.uk\\\/news\\\/york-council-data-breach#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.databreachlawyers.co.uk\\\/news\\\/york-council-data-breach\"},\"author\":{\"name\":\"Matt\",\"@id\":\"https:\\\/\\\/www.databreachlawyers.co.uk\\\/news\\\/#\\\/schema\\\/person\\\/8268f2eb7215625a8facfaa4240dec03\"},\"headline\":\"York Council data breach\",\"datePublished\":\"2018-12-03T14:10:18+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.databreachlawyers.co.uk\\\/news\\\/york-council-data-breach\"},\"wordCount\":368,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.databreachlawyers.co.uk\\\/news\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.databreachlawyers.co.uk\\\/news\\\/york-council-data-breach#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/www.databreachlawyers.co.uk\\\/news\\\/wp-content\\\/uploads\\\/2017\\\/05\\\/security-experts-mobile-breaches-min.png?fit=1200%2C300&ssl=1\",\"keywords\":[\"Apps\",\"Council Data Breach\",\"Data Breach\",\"Personal Data\"],\"articleSection\":[\"Apps\",\"Claims\",\"Council Data Breaches\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.databreachlawyers.co.uk\\\/news\\\/york-council-data-breach#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.databreachlawyers.co.uk\\\/news\\\/york-council-data-breach\",\"url\":\"https:\\\/\\\/www.databreachlawyers.co.uk\\\/news\\\/york-council-data-breach\",\"name\":\"York Council data breach - Data Breach Lawyers\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.databreachlawyers.co.uk\\\/news\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.databreachlawyers.co.uk\\\/news\\\/york-council-data-breach#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.databreachlawyers.co.uk\\\/news\\\/york-council-data-breach#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/www.databreachlawyers.co.uk\\\/news\\\/wp-content\\\/uploads\\\/2017\\\/05\\\/security-experts-mobile-breaches-min.png?fit=1200%2C300&ssl=1\",\"datePublished\":\"2018-12-03T14:10:18+00:00\",\"description\":\"The York City Council data breach revealed at the end of November appears to be another avoidable breach from a local authority.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.databreachlawyers.co.uk\\\/news\\\/york-council-data-breach#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.databreachlawyers.co.uk\\\/news\\\/york-council-data-breach\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/www.databreachlawyers.co.uk\\\/news\\\/york-council-data-breach#primaryimage\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/www.databreachlawyers.co.uk\\\/news\\\/wp-content\\\/uploads\\\/2017\\\/05\\\/security-experts-mobile-breaches-min.png?fit=1200%2C300&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/www.databreachlawyers.co.uk\\\/news\\\/wp-content\\\/uploads\\\/2017\\\/05\\\/security-experts-mobile-breaches-min.png?fit=1200%2C300&ssl=1\",\"width\":1200,\"height\":300,\"caption\":\"mobiles and apps\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.databreachlawyers.co.uk\\\/news\\\/york-council-data-breach#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.databreachlawyers.co.uk\\\/news\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"York Council data breach\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.databreachlawyers.co.uk\\\/news\\\/#website\",\"url\":\"https:\\\/\\\/www.databreachlawyers.co.uk\\\/news\\\/\",\"name\":\"Data Breach Lawyers\",\"description\":\"Latest News, Articles &amp; Opinions\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.databreachlawyers.co.uk\\\/news\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.databreachlawyers.co.uk\\\/news\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.databreachlawyers.co.uk\\\/news\\\/#organization\",\"name\":\"Data Breach Lawyers\",\"url\":\"https:\\\/\\\/www.databreachlawyers.co.uk\\\/news\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/www.databreachlawyers.co.uk\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i2.wp.com\\\/www.databreachlawyers.co.uk\\\/news\\\/wp-content\\\/uploads\\\/2016\\\/09\\\/data_breach_logo.png?fit=250%2C80&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i2.wp.com\\\/www.databreachlawyers.co.uk\\\/news\\\/wp-content\\\/uploads\\\/2016\\\/09\\\/data_breach_logo.png?fit=250%2C80&ssl=1\",\"width\":250,\"height\":80,\"caption\":\"Data Breach Lawyers\"},\"image\":{\"@id\":\"https:\\\/\\\/www.databreachlawyers.co.uk\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.databreachlawyers.co.uk\\\/news\\\/#\\\/schema\\\/person\\\/8268f2eb7215625a8facfaa4240dec03\",\"name\":\"Matt\",\"url\":\"https:\\\/\\\/www.databreachlawyers.co.uk\\\/news\\\/author\\\/matt\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"York Council data breach - Data Breach Lawyers","description":"The York City Council data breach revealed at the end of November appears to be another avoidable breach from a local authority.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.databreachlawyers.co.uk\/news\/york-council-data-breach","og_locale":"en_GB","og_type":"article","og_title":"York Council data breach - Data Breach Lawyers","og_description":"The York City Council data breach revealed at the end of November appears to be another avoidable breach from a local authority.","og_url":"https:\/\/www.databreachlawyers.co.uk\/news\/york-council-data-breach","og_site_name":"Data Breach Lawyers","article_published_time":"2018-12-03T14:10:18+00:00","og_image":[{"width":1200,"height":300,"url":"https:\/\/i1.wp.com\/www.databreachlawyers.co.uk\/news\/wp-content\/uploads\/2017\/05\/security-experts-mobile-breaches-min.png?fit=1200%2C300&ssl=1","type":"image\/png"}],"author":"Matt","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Matt","Estimated reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.databreachlawyers.co.uk\/news\/york-council-data-breach#article","isPartOf":{"@id":"https:\/\/www.databreachlawyers.co.uk\/news\/york-council-data-breach"},"author":{"name":"Matt","@id":"https:\/\/www.databreachlawyers.co.uk\/news\/#\/schema\/person\/8268f2eb7215625a8facfaa4240dec03"},"headline":"York Council data breach","datePublished":"2018-12-03T14:10:18+00:00","mainEntityOfPage":{"@id":"https:\/\/www.databreachlawyers.co.uk\/news\/york-council-data-breach"},"wordCount":368,"commentCount":0,"publisher":{"@id":"https:\/\/www.databreachlawyers.co.uk\/news\/#organization"},"image":{"@id":"https:\/\/www.databreachlawyers.co.uk\/news\/york-council-data-breach#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/www.databreachlawyers.co.uk\/news\/wp-content\/uploads\/2017\/05\/security-experts-mobile-breaches-min.png?fit=1200%2C300&ssl=1","keywords":["Apps","Council Data Breach","Data Breach","Personal Data"],"articleSection":["Apps","Claims","Council Data Breaches"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.databreachlawyers.co.uk\/news\/york-council-data-breach#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.databreachlawyers.co.uk\/news\/york-council-data-breach","url":"https:\/\/www.databreachlawyers.co.uk\/news\/york-council-data-breach","name":"York Council data breach - Data Breach Lawyers","isPartOf":{"@id":"https:\/\/www.databreachlawyers.co.uk\/news\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.databreachlawyers.co.uk\/news\/york-council-data-breach#primaryimage"},"image":{"@id":"https:\/\/www.databreachlawyers.co.uk\/news\/york-council-data-breach#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/www.databreachlawyers.co.uk\/news\/wp-content\/uploads\/2017\/05\/security-experts-mobile-breaches-min.png?fit=1200%2C300&ssl=1","datePublished":"2018-12-03T14:10:18+00:00","description":"The York City Council data breach revealed at the end of November appears to be another avoidable breach from a local authority.","breadcrumb":{"@id":"https:\/\/www.databreachlawyers.co.uk\/news\/york-council-data-breach#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.databreachlawyers.co.uk\/news\/york-council-data-breach"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.databreachlawyers.co.uk\/news\/york-council-data-breach#primaryimage","url":"https:\/\/i0.wp.com\/www.databreachlawyers.co.uk\/news\/wp-content\/uploads\/2017\/05\/security-experts-mobile-breaches-min.png?fit=1200%2C300&ssl=1","contentUrl":"https:\/\/i0.wp.com\/www.databreachlawyers.co.uk\/news\/wp-content\/uploads\/2017\/05\/security-experts-mobile-breaches-min.png?fit=1200%2C300&ssl=1","width":1200,"height":300,"caption":"mobiles and apps"},{"@type":"BreadcrumbList","@id":"https:\/\/www.databreachlawyers.co.uk\/news\/york-council-data-breach#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.databreachlawyers.co.uk\/news"},{"@type":"ListItem","position":2,"name":"York Council data breach"}]},{"@type":"WebSite","@id":"https:\/\/www.databreachlawyers.co.uk\/news\/#website","url":"https:\/\/www.databreachlawyers.co.uk\/news\/","name":"Data Breach Lawyers","description":"Latest News, Articles &amp; Opinions","publisher":{"@id":"https:\/\/www.databreachlawyers.co.uk\/news\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.databreachlawyers.co.uk\/news\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/www.databreachlawyers.co.uk\/news\/#organization","name":"Data Breach Lawyers","url":"https:\/\/www.databreachlawyers.co.uk\/news\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.databreachlawyers.co.uk\/news\/#\/schema\/logo\/image\/","url":"https:\/\/i2.wp.com\/www.databreachlawyers.co.uk\/news\/wp-content\/uploads\/2016\/09\/data_breach_logo.png?fit=250%2C80&ssl=1","contentUrl":"https:\/\/i2.wp.com\/www.databreachlawyers.co.uk\/news\/wp-content\/uploads\/2016\/09\/data_breach_logo.png?fit=250%2C80&ssl=1","width":250,"height":80,"caption":"Data Breach Lawyers"},"image":{"@id":"https:\/\/www.databreachlawyers.co.uk\/news\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.databreachlawyers.co.uk\/news\/#\/schema\/person\/8268f2eb7215625a8facfaa4240dec03","name":"Matt","url":"https:\/\/www.databreachlawyers.co.uk\/news\/author\/matt"}]}},"jetpack_featured_media_url":"https:\/\/i0.wp.com\/www.databreachlawyers.co.uk\/news\/wp-content\/uploads\/2017\/05\/security-experts-mobile-breaches-min.png?fit=1200%2C300&ssl=1","jetpack-related-posts":[],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.databreachlawyers.co.uk\/news\/wp-json\/wp\/v2\/posts\/735","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.databreachlawyers.co.uk\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.databreachlawyers.co.uk\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.databreachlawyers.co.uk\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.databreachlawyers.co.uk\/news\/wp-json\/wp\/v2\/comments?post=735"}],"version-history":[{"count":1,"href":"https:\/\/www.databreachlawyers.co.uk\/news\/wp-json\/wp\/v2\/posts\/735\/revisions"}],"predecessor-version":[{"id":736,"href":"https:\/\/www.databreachlawyers.co.uk\/news\/wp-json\/wp\/v2\/posts\/735\/revisions\/736"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.databreachlawyers.co.uk\/news\/wp-json\/wp\/v2\/media\/299"}],"wp:attachment":[{"href":"https:\/\/www.databreachlawyers.co.uk\/news\/wp-json\/wp\/v2\/media?parent=735"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.databreachlawyers.co.uk\/news\/wp-json\/wp\/v2\/categories?post=735"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.databreachlawyers.co.uk\/news\/wp-json\/wp\/v2\/tags?post=735"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}