The ICO exists to empower you through information.
This page contains information on data security breaches that have been reported to us by organisations that have suffered a breach. We publish this information to help organisations understand what to look out for and help them to take appropriate action.
Data security incidents occur when organisations do not have “appropriate technical or organisational measures” to protect the personal data they hold. This is a requirement of the UK General Data Protection Regulation (GDPR) under Principle (f): Integrity and confidentiality (security). They are a major concern for those affected and a key area of action for the ICO. Organisations are required to report breaches within 72 hours of discovery under Article 33 of the GDPR.
The figures reported here are based on the number of reports of personal data breaches received by the ICO up to Q4 2023. Please note that the data is presented in calendar years and quarters, following the Office for National Statistics style for non-financial data releases.
To view the dashboard in full screen, click the button in the bottom-right corner below.
There are some limitations to the data contained in this release. Notably:
This dashboard has been produced as part of the ICO’s commitment to responsible, proactive publishing of data. If you have any feedback or comments, please contact [email protected].
A downloadable version of the data contained within the dashboard is provided below along with some supporting documentation. Note: some reports hold multiple characteristics for some of the categories of data and as such appear on multiple rows – this may make it appear as if there are more breaches reported than is actually the case.
Action we've taken
File (20.68MB)
Action we've taken
Below you will find links to our guidance and guidance published by the National Cyber Security Centre (NCSC) about how to prevent breaches.
For organisations
For organisations
External link
About the ICO
About the ICO
For organisations
External link
The ICO exists to empower you through information.
