PSNI staff to receive £7,500 compensation after major data breach

ICO describes incident as a 'perfect storm of risk and harm'

Police staff in Northern Ireland will each receive £7,500 compensation after a major 2023 data breach exposed personal details of thousands of officers, sparking significant safety concerns and legal action.

Police staff in Northern Ireland whose personal details were exposed in a large-scale data breach are to receive £7,500 each under a universal compensation scheme.

The payment follows a major security incident in 2023, when sensitive information relating to thousands of police employees was inadvertently released online.

Liam Kelly, head of the Police Federation for Northern Ireland, confirmed that £119m has been allocated to compensate affected personnel, with payments expected to begin in April. He described the offer as a significant development in a long-running dispute.

"This universal offer is substantial and major progress in this protracted matter," Mr Kelly said.

"For many officers, it will mean they are able to draw a line under the case and move on with their careers."

Worst breach in UK policing history

The breach occurred in August 2023 when a junior staff member mistakenly published a spreadsheet in response to a Freedom of Information request. The document contained surnames, initials, ranks and roles of approximately 9,480 police officers and staff. Some of those named were understood to have links to sensitive intelligence work.

In total, around 345,000 pieces of information were exposed within a hidden tab of the file.

An internal review later found that six staff members failed to detect the error before publication.

The Information Commissioner's Office described the incident as a "perfect storm of risk and harm" and labelled it the most serious data breach ever involving a UK police force.

The breach led to the resignation of the Chief Constable and prompted a joint review of data handling procedures. Investigators identified significant weaknesses in internal disclosure systems, including the absence of robust sign-off safeguards.

Security fears and personal impact

The consequences of the data breach were particularly severe given Northern Ireland's security context. Police confirmed the leaked information had reached dissident republican groups, raising concerns for officers' safety.

In the months following the breach, many officers reported stress-related health problems. Police mental health services were placed under significant strain, with some staff facing long waits for support.

An unspecified number of officers relocated for safety reasons. Others installed additional security measures at their homes. Some sought assistance to change their names but were advised that such steps were unnecessary.

Mr Kelly said the impact had been deeply felt across the workforce.

"Many of our officers felt extremely vulnerable by the information that was accidentally released," he said.

He added that while many officers were likely to accept the compensation, others who experienced more serious consequences might continue legal action.

"This is not a one-size-fits-all offer," he said. "Some colleagues who were left particularly vulnerable may wish to proceed with their legal cases."

Edwards Solicitors, which represents about 5,000 of the nearly 9,500 officers affected, welcomed the compensation offer. Partner Philip Gordon said:

"We are delighted that after more than two years of hard work and considerable patience from our clients, the chief constable has finally been able to make an offer of compensation," he said.

Gordon added that some cases involved accounts of severe distress suffered by officers and their families, and that legal proceedings would continue where the offer was considered insufficient.