Meet the Other Phone. Protection built in.

Meet the Other Phone.
Protection built in.

Buy now

Please or to access all these features

Feminism: Sex and gender discussions

Labour Party Data Incident

77 replies

Tesla73 · 04/11/2021 09:55

Anyone else alarmed by this especially when we know what Labour are like in terms of wrong think etc (remember Lily Madigans gleeful tweet about having access to everyones lovely data)

"We are writing to you to let you know that a third party that handles data on our behalf has been subject to a cyber incident. While the Party’s investigation remains ongoing, we wanted to make you aware of this incident and the measures which we have taken in response. We have also provided details of precautionary steps you may consider taking to help protect yourself.

What happened?

On 29 October 2021, we were informed of the cyber incident by the third party. The third party told us that the incident had resulted in a significant quantity of Party data being rendered inaccessible on their systems. As soon as the Party was notified of these matters, we engaged third-party experts and the incident was immediately reported to the relevant authorities, including the National Crime Agency (NCA), National Cyber Security Centre (NCSC) and the Information Commissioner’s Office (ICO). The Party continues to work closely with each of these authorities. The Party is also working closely and on an urgent basis with the third party in order to understand the full nature, circumstances and impact of the incident. The Party’s own data systems were unaffected by this incident.

What information was involved?

We understand that the data includes information provided to the Party by its members, registered and affiliated supporters, and other individuals who have provided their information to the Party. The full scope and impact of the incident is being urgently investigated.

What are the Labour Party doing?

The Party takes the security of all personal information for which it is responsible very seriously. It is doing everything within its power to investigate and address this incident in close liaison with law enforcement, the Information Commissioner’s Office and the affected third party.

What you can do

With incidents of this nature becoming increasingly common, it is more important than ever to remain vigilant against suspicious activity. As an immediate precaution, and in line with National Cyber Security Centre guidance, we recommend you take the following steps to protect yourself:

Be especially vigilant against suspicious activity, including suspicious emails, phone calls or text messages. The National Cyber Security Centre has published advice regarding suspicious emails on its website: ncsc.gov.uk/guidance/suspicious-email-actions
If you have received an email which you’re not quite sure about, forward it to the Suspicious Email Reporting Service (SERS) via [email protected].
You can also implement two-factor authentication (2FA) where possible to protect your online accounts from unauthorised access as described in the following publication on the National Cyber Security Centre’s website: www.ncsc.gov.uk/guidance/setting-two-factor-authentication-2fa
Additional guidance about what to watch out for online can be found here: www.ncsc.gov.uk/guidance/data-breaches"

The worrying thing for me is that i left the Labour Party years ago because of their betrayal of women yet this suggests to me that my details are still on their system.

I was still getting the meeting minutes from my local party and I emailed the leader of the local party asking why they still had my details but he didnt even acknowledge my email. The emails did stop though and I gave it no more thought but now I get this email to both my personal email and my work one.

OP posts:
highame · 07/11/2021 08:37

Labour is in financial trouble, having to pay our for the anti-Semitism affair and this on top because if the data breach has been by The General Secretary, Labour will have to foot the £17.5m bill. I want to see Labour reform itself and clearly support women's rights but I do not want to see it sink. Perhaps, as well as calling others out for incompetence, it should at least spend a little time on it's own stuff. Please Labour, get your act together.

Ereshkigalangcleg · 07/11/2021 08:42

Placemarking, left over two years ago but have this email.

DrinkReprehensibly · 07/11/2021 08:42

I got the message and I've never been a paying member of the Labour Party at any point. I just joined a mailing list for a short while several years ago but unsubscribed a long time ago. Really irritated they kept my details which have now been stolen!

fairymouse · 07/11/2021 08:47

I'm also ex member and have got this email

Dbank · 07/11/2021 09:09

The Party takes the security of all personal information for which it is responsible very seriously.

So why did you give it to a third party?

SirSamuelVimes · 07/11/2021 09:13

Not affected by this as not (ever) a LP member but am going to stick a cheeky place mark here as this is a really significant breach by the sound of it and I would like to keep an eye on developments.

Imnobody4 · 07/11/2021 09:16

I've received e mail - left about 2 years ago.

Dbank · 07/11/2021 09:32

This isn't the first reported incident, they lost membership data in August 2020 when Blackbaud were hacked.

www.computerweekly.com/news/252487002/Labour-Party-is-latest-victim-of-Blackbaud-ransomware-attack

But it's all okay as they ransom was paid and the hackers promised to delete the data.

MrsFin · 07/11/2021 09:54

I'm not affected, but you should all be able to submit a DSAR (Data Subject Access Request) to the Labour Party to find out what personal information they hold about you. They are legally bound to respond, within 90 days I think.
They are also legally obliged to publish how to make this request. Details should be on their website somewhere.

KimikosNightmare · 07/11/2021 09:59

I got one too. I left when Corbyn became leader.

TrevorFountain · 07/11/2021 10:09

@DrinkReprehensibly

I got the message and I've never been a paying member of the Labour Party at any point. I just joined a mailing list for a short while several years ago but unsubscribed a long time ago. Really irritated they kept my details which have now been stolen!
Same here, and I've also filled in local surveys from Labour politicians and candidates, the data from which is supposed to be stored securely and in accordance with GDPR - not passed to a 3rd party and hacked.

So my first step is complaining, and also asking what data they hold on me, and what's happened to it?

I remember the Lib Dems' EARS database getting loads of local Lib Dem parties into trouble. Copies being handed out willy nilly, data kept for too long, canvassers ringing bereaved people asking to speak to the dead person. It was really bad.

Tesla73 · 07/11/2021 11:03

Anyone been able to find how to submit DSAR request on the Labour site?
I cant find anything - did search on data but just got one result and that was being members only wall

OP posts:
Ereshkigalangcleg · 07/11/2021 11:36

I got one too. I left when Corbyn became leader.

Wow that's over 6 years ago, isn't it?

Ramayquaza · 07/11/2021 12:52

Also received this email. I left the Labour Party in 2010 and I'm furious. Thanks for the useful info upthread on how to complain.

Ereshkigalangcleg · 07/11/2021 13:00

That's definitely outside the time they should be holding your data for.

MrsFin · 07/11/2021 13:59

Go to this link

https://labour.org.uk/privacy-policy/

Almost at the bottom there's there's a link
I want to know what information you hold about mee*

It opens an email addressed to data [email protected]....,

Tesla73 · 07/11/2021 14:33

Mrsfin - thanks

OP posts:
MrsFin · 07/11/2021 16:26

HTH

PastMyBestBeforeDate · 09/11/2021 12:37

I've had a 'response to my complaint which is less than helpful but includes the following:
Where someone is no longer a member or supporter, we restrict the processing of this information in such a way to ensure that the Labour Party does not contact you again.
Except that's not true as I was getting emails from them in July with personal salutations. Well after I'd left.

Whatthechicken · 09/11/2021 13:00

I got a reply to, just a mass communication reply to my complaint, saying they can’t give any more info for now. How are they getting away with not telling us who the third party is?

MrsFin · 09/11/2021 19:51

@PastMyBestBeforeDate

I've had a 'response to my complaint which is less than helpful but includes the following: Where someone is no longer a member or supporter, we restrict the processing of this information in such a way to ensure that the Labour Party does not contact you again. Except that's not true as I was getting emails from them in July with personal salutations. Well after I'd left.

I'm pretty sure they have to delete it, not restrict the processing of it.

ElizabethTudor · 09/11/2021 20:12

@PastMyBestBeforeDate

The link now requests that you don't fill out the complaint form but email [email protected] instead.
I’ve just submitted a complaint to this email address. I left sometime ago. It’s a bloody joke.
Dbank · 09/11/2021 22:34

Still no mention of the data breach, on the Labour Party website, despite "We will also provide updates on our website in respect of this incident in line with guidance received from relevant law enforcement authorities." in the email I received (3.11.2021)

Hardly inspires confidence in them running the country if they can't even keep their members details safe.

PastMyBestBeforeDate · 09/11/2021 22:50

Yes MrsFin. But even the suspect 'restriction' is an illusion. They've never stopped emailing me. My old CLP did stop but the Party kept going.

Tesla73 · 12/11/2021 16:24

Anyone else getting loads more spam emails of late? I seem to be getting twice as many since this leak

OP posts: