{"id":3431,"date":"2018-11-30T15:42:59","date_gmt":"2018-11-30T15:42:59","guid":{"rendered":"https:\/\/www.dataleaklawyers.co.uk\/blog\/?p=3431"},"modified":"2018-11-30T15:42:59","modified_gmt":"2018-11-30T15:42:59","slug":"york-council-data-breach","status":"publish","type":"post","link":"https:\/\/www.dataleaklawyers.co.uk\/blog\/york-council-data-breach","title":{"rendered":"York Council data breach"},"content":{"rendered":"

The recent York Council data breach led to the information for almost 6,000 people being exposed due to a coding vulnerability.<\/p>\n

A computer expert happened upon the vulnerability in the \u2018One Plant York\u2019 app. He did the right thing and reported the breach to York Council, who then bizarrely reported him to the police. It\u2019s understood that the expert had alerted the Council in efforts to make them aware, so the issue could be resolved.<\/p>\n

The police matter aside, the result is that the data for almost 6,000 people has been left exposed. If one expert happened upon it, who\u2019s to say someone else isn\u2019t already aware of it, and hasn\u2019t already been exploiting it?<\/p>\n

<\/p>\n

About the York Council data breach<\/strong><\/h3>\n

The York Council data breach stemmed from a vulnerability in the code for their One Planet York app. This app is used as pat of their waste reduction plans and for the overall improvement of their environmental performance.<\/p>\n

The app has since been taken down after the discovery of the data breach.<\/p>\n

What data has been exposed in the York Council data breach?<\/strong><\/h3>\n

The data exposed in the York Council data breach is user information that had been supplied during the sign-up process for the app.<\/p>\n

This is said to include:<\/p>\n