Reading:
York Council data breach
Share:
mobiles and apps

York Council data breach

Our quick and easy process allows you to start your data breach claim - sign-up today to claim potentially thousands in compensation.

Get A Call Back Today

We specialise in representing victims for data breach compensation claims.

Information on how we handle your data is available in our Privacy Policy.

The York City Council data breach revealed at the end of November appears to be another avoidable breach from a local authority.

In this incident, an IT expert inadvertently stumbled across a huge vulnerability in the York City Council’s environmental app, named One Plant York. The app, which has since been taken down, had some 6,000 users and was aimed at promoting environmental protection. Unfortunately, a vulnerability in the app’s coding led to the personal and private information of the 6,000 users being compromised.

6,0000 affected by the York Council data breach

A huge 6,000 people were affected by the York Council data breach. An IT expert stumbled across the coding vulnerability and notified the council by sending a redacted sample of the compromised data to them.

The council initially reported him to the police, despite the IT expert acting in good faith in telling them (a ‘white hat hack’ of sorts). They have since reportedly thanked him and apologised for reporting him.

What data was compromised in the York Council data breach?

The data compromised in the York Council data breach included:

  • User IDs;
  • Usernames;
  • Passwords (understood to be in an encrypted format);
  • Telephone numbers;
  • Email addresses;
  • Addresses;
  • References for properties;
  • Location and settings;
  • Information about ‘Planet points’ (an in-app feature).

This is enough information for someone with bad intentions to do some serious damage. In the wrong hands, a little data can go along way. That’s why it’s so important for data controllers to look after the data they hold. The consequences can include GDPR fines and claims for compensation.

Another council data breach

The York Council data breach is yet another local authority data breach. They are quite common, and we represent a lot of people with compensation cases for damages as a victim of a council data breach.

We offer No Win, No Fee representation for select council data breaches we take forward. We do this where we’re confident enough that there is a claim to answer for.

Councils and outsourced local authority agencies hold a lot of personal and sensitive data about people. It must be properly protected to avoid the distress associated with a data breach incident.

Get A Call Back Today

We specialise in representing victims for data breach compensation claims.

Information on how we handle your data is available in our Privacy Policy.

Get In Touch


Speak to our team now for help and advice.

Tell us when you are free and our team can call you!
Call our Claims Helpline now for free advice!
What do you have to lose? Find out more here!

Start Your Claim

Fill out our quick claim form below and we’ll contact
you when you’re ready to talk to us.
All fields marked * are required.

Your privacy is extremely important to us. Information on how we handle your data is in our Privacy Policy

arrow-up icon