Your council

Public notices of personal data breach incidents

We publish public notices about confirmed personal data breaches involving the council.

You should stay alert to possible scams, especially after a personal data breach is reported.

Be careful if you receive unexpected:

  • phone calls
  • emails
  • text messages
  • visits from people you do not know

Criminals may pretend to be from trusted organisations to get your personal information.

Confirmed personal data breaches


Personal data incident update for Blue Badge Holders

We want to reassure Blue Badge holders following a recent incident (June 2026) involving an email update we sent out.

We are very sorry for any concern this may cause. Protecting the personal information of our residents is extremely important to us, and we are treating this matter with the highest priority and care.

What happened in this incident

We became aware that an email was sent in a way that meant recipients’ email addresses were visible to others who received the email, and we took immediate actions to contain it. Our established data breach procedures were put into action straight away.

We are carrying out a thorough investigation to fully understand what happened and how we can reduce the risk of this happening again. This includes a detailed risk assessment in line with guidance from the Information Commissioner’s Office (ICO) and to continue to assess any potential impact on individuals.

Regulatory notification of this incident

Following our initial assessment, we reported this incident to the ICO, in line with our legal obligations. We will fully cooperate with any enquiries or investigation the ICO may undertake.

Support for individuals regarding this incident

We have already contacted everyone identified as being directly affected by this incident, providing information about what had happened, along with advice and support.

If you have not received this direct contact from us, it means your email address or personal data has not been identified as part of the incident.

Steps we are taking regarding this incident

Alongside the above, we are reviewing our processes, systems, and staff guidance to reduce the risk of this happening again.


Our ongoing commitment to data protection

We are committed to being open and transparent and while any investigation is ongoing, we will continue to provide updates where appropriate.

We recognise how important it is to maintain your trust, and we are fully committed to learning from incidents.

If you have any concerns or require further information, please contact the Information Governance Team.

Find out about your right to make a data protection complaint; the Information Commissioner's Office (ICO) provides help and advice for the public relating to data protection.

Also see

Information Governance Team

West Offices, Station Rise, York, YO1 6GA

Telephone: 01904 555719