Tescos data breach- AIBU?

[ShittyTescos]

Just got home and there’s loads of paper blowing around my garden. Went out to see what it was and it’s all Tescos van loading sheets and Delivery Detail sheets. The van loading sheet contains lists of peoples names and postcodes. The delivery detail sheets are full names, addresses and contact details. Tried con acting Tescos but they’re not answering the phone, there’s no email address and they’re not responding on Facebook. On one hand, I probably should just bin the stuff properly, I don’t want to get a driver into trouble. On the other, I’m really pissed that they are so careless with personal details and obviously this is a massive breach!

I work in data protection as well and I couldn’t get worked up about this. It’s a breach, but there’s no harm to anyone unless you go snooping. Once the driver left all those sheets literally in my shopping (back when Tesco did the tray liners and you just lifted your shopping out). I just put them in the bin.

This (although unlike pp I don't have dv concerns).

Yes, you should shred it but you really should tell tesco so it can be reiterated to drivers about keeping that paperwork safe.

Looks like a Tescos van driver was having a bad dogs day, opens van door and massive haemorhage of paperwork all over the place.

After complaining, I would still contact Tescos and ask them to deal with the paperwork.

Name and address is not a big deal, you can get this online for anyone.

No you cannot.

It’s not a serious breach. It’s no more than you’d find in a telephone directory.

Just put it them the bin and don't get the poor boy in trouble.

Accidents happen

Surely It's personal data, but not sensitive personal data unless it has payment details on.

I'd let the local store know so that they can follow up with the driver, but no more.

🙄

Yes it's a breach but how you deal with it plays a big part in the 'seriousness' /risk level. If you collect them all together, contact Tesco and then return them, the risk is low as they will be able to see whether all of the lost data is retrieved and will have some confidence that it wasn't copied or used inappropriately.

You can find peoples name and address via the electrol roll and probably by going through a persons recycling bin. Just bin it. It's not medical confidential data x

I’ll join you with the eye roll. The amount of info I can find with just a name on the internet is astounding. And I don’t need a data breach to give me an address. People divulge huge amounts of personal data much in excess of their name/address on social media every day. I have a neighbour I can’t stand. Haven’t spoken to him or his wife for over 7 years now. I know he was in hospital for a serious operation 2 days ago. It’s life limiting. They would never want me to know. But I do. Because it was posted on social media. I’d be more upset about that than a Tesco delivery breach.

People have become so precious now and love to throw around data breach with superiority. Fgs its hardly top secret information. Why would anyone care.

Yep! Unless it contains bank details/passwords/med info I think we all need to unclench a bit about data protection. Most people just aren't that interesting.

Ok maybe I’m over reacting. I’m really careful with my personal stuff and would never put this type of stuff online. Loads of people saying that you can find out more on Facebook but I would never do that, which is why I was so annoyed, I’d be really angry if my details were floating around like this. It’s the crappy system that I’m unhappy with, like I said in my OP, I don’t want the driver in trouble. how hard would this be to put on a password protected device? Apparently most of you don’t feel the same though so maybe it’s just me 🤷🏼‍♀️

Yes I’m well aware thanks. I still don’t think it’s a massive breach though 😂

Crikey, some people have highly unrealistic expectations of the ICO if they believe any enforcement action will be taken on the back of an incident like this. I’d be shocked if they even deigned to respond, and I’ve reported enough incidents myself in a professional capacity to know.

This isn’t a fundamental failing of policy or process by Tesco which has put peoples data at risk. It’s a random instance of human error which has resulted in relatively low risk personal data falling into the hands of an unauthorised person. By all means inform Tesco, but they’re likely to just ask that you securely dispose of the details.

But if someone wants to find out this information about you they could, quite easily. My mum found her first born who she'd put up for adoption with little more than his original birth certificate (obviously his name had since been changed) and date of birth; this was before Facebook/social media, etc.

I sell on Etsy and have on occasion had the odd customer say their items had t arrived when they have. Every single time I've been able to prove they're lying by a couple of simple searches on fb - even if your account is locked down you can put a whole family together by checking out the likes on their profile pics. It's really not difficult.

It's weird how we've become so militant about data protection whilst simultaneously opting to share so much without a second thought.

Name, address and contact details? So exactly like what used to be in the phone book?

It's weird how we've become so militant about data protection whilst simultaneously opting to share so much without a second thought.

Not everyone shares everything though - you cannot find my name anywhere on the internet, due to having an ex partner who would like to kill me.

It's weird how everyone thinks their own situation echoes that of all other people.

Do people really have so much time on their hands to report a probably minimum waged driver for a "data breach" because the wind blew some paperwork somewhere? Fuck me.

Some of you need to give your heads a wobble and get a hobby.

We don't know it was the wind that caused it though - it could be that a van was broken into, that they were dropped etc. etc. etc.

And it could be said the same for you.

It does contain contact details it says so right there in the OP.

It needs to be reported. Every single breech should be reported. It could be that OP now has a famous celebs address or something like that.

This going to far now. If you don’t want to be found, don’t use online deliveries. If I valued my life re real threats to kill I’d move as far away as I could realistically do so and pay cash for everything. I wouldn’t risk an innocent local data breach.

Its not a serious breach. I work in data protection and wouldn't bother taking this any further. The ICO will not be interested in this at all. They'll log it, send you a general acknowledgement and then you'll never hear from them again.