Data breaches by Mermaids exposed in the Times

[truthisarevolutionaryact]

Mermaids has apparently put lots of confidential data online including private emails, personal data and emails demonstrating the pressure they have put on the Tavistock.
Andrew Gilligan article - share token:

www.thetimes.co.uk/article/parents-anger-as-child-sex-change-charity-puts-private-emails-online-tl0g5hwcg?shareToken=2f8ddc23419c61360023562a62e74d13

@OneEpisode

Mermaids has to file accounts. The accounts to March 2020 were filed in January 3021 and say on p32: “Mid-June 2019 Mermaids was made aware that information from internal communications was available online. Although the breach was quickly contained, this resulted in a front page story in a national newspaper. The need to inform those affected in a timely manner as well as addressing the reputational risk was urgent. Additionally it was clear that a thorough review of this incident plus interrogation of all other data processing functions within the charity was required. Mermaids took this incident very seriously and immediately sought professional advice on all aspects, including legal support and data consultancy. Thankfully Mermaids was in a financial position to invest in the best services available, to help secure the future of the organisation. The exceptional costs from this incident are included in legal costs and amount to £158,029”

The “those effected” does perhaps conflict with their statements at the time.

Thanks for this!

[quote Popchyk]Jolyon Maugham (prominent barrister) on Twitter saying that this isn't the first Mermaids breach.

"Far less serious but earlier this year they shared the names of donors with other donors on email without permission. They need to make big changes".

twitter.com/JolyonMaugham/status/1140132260471083009[/quote]
From earlier in the thread, and the tweet is part of a conversation with Maya F and Debbie H. Jump forward two years....

Interesting that Adam Wagner was commenting on that thread that Mermaids would be likely to be subject to a huge ICO fine - in the hundreds of thousands of pounds range.