Data breach

[waitingformyturn]

So I received an email today from a mortgage broker we used to buy our current home from around 6 months ago. The email thread contained details of someone else's mortgage application and their credit report was also attached. Their personal email and their partners personal email was visible in the chain too. Obviously this is a blatant data protection breach by the broker. I can't help but feel a bit annoyed this email somehow found it's way to me, concerned about them being careless (as they also hold a lot of info of mine) and annoyed for the person who's data they've just sent out. I know through our solicitor for example all messages were encrypted to avoid this kind of thing happening. I get it's a silly error but Aibu to complain or even inform the person their data has been breached?

Look at their website, look for details of a managing partner or data controller. Report this to them.

Report it to the person whose data has been breached. Also to the Information Commissioner's Office. Then let the mortgage broker know.

all messages were encrypted to avoid this kind of thing happening
Encryption doesn't prevent a human error in which you are sent the wrong details.

It doesn't but it takes it out of the higher risk data breach category.

Guessing it was a different email address breach?

We use an encrypted secure email system - but there could be a breach if it was sent to the wrong person. The receiver would have to actively try to access it - and there are systems in place if the wrong person is emailed to ensure that the email and any attachments can be deleted.

Tell the person that they have done this breach. You don't need to report it - and it depends on the organisation if they need to report it, although there is a lot of sensitive information that has been released.

Emails are great, but it's easy to make mistakes,.

But thinking about it, our secure email system doesn't allow you to store email addresses. You have to actively put it in so that helps reduce breaches.

all messages were encrypted to avoid this kind of thing happening
Encryption doesn't prevent a human error in which you are sent the wrong details.

What does encryption mean in this context? When I receive healthcare related emails (and attachments to diagnoses letters etc.) these attachments are encrypted - I have to enter my date of birth to read them. So surely this would prevent this kind of breach?

Thanks for replies. Regarding encrypted emailed from solicitors - I may have used the wrong phase but I meant that they came via a secure email so I had to physically enter a system and put in a password to access.