Gov.uk data breach exposes user details

The GDS asks users to reset their passwords for data.gov.uk

The Government Digital Service (GDS) has told users to change their passwords following a security breach affecting one of its websites.

During a routine security review, GDS found that it had left a clutch of usernames and email addresses on a publicly accessible system.

A spokesperson for the Cabinet Office said: "During a routine review of data.gov.uk, it was discovered that a file containing some users' names, emails and hashed passwords was publicly accessible on a third-party system." The hashed passwords mean they're scrambled and therefore harder to crack.

Advertisement - Article continues below

Data.gov.uk helps users to find information published by government departments and agencies, public bodies and local authorities. The data is used to help people to learn more about how the government works, carry out research and to build applications or services based on the data. 

The spokesperson added that it was very recently discovered and action was taken to notify users and the UK's data watchdog, the Information Commissioner's Office, as soon as possible. The breach affects users who signed up to data.gov.uk on or before 20 June 2015.

"There is no evidence of misuse of anyone's credential and users have been asked to reset their passwords purely as a precautionary measure," said the spokesperson.

Advertisement
Advertisement - Article continues below

IT Pro contacted the ICO and a spokesperson said: "We are aware of an incident and are making enquiries."

Picture: Bigstock

Featured Resources

Top 5 challenges of migrating applications to the cloud

Explore how VMware Cloud on AWS helps to address common cloud migration challenges

Download now

3 reasons why now is the time to rethink your network

Changing requirements call for new solutions

Download now

All-flash buyer’s guide

Tips for evaluating Solid-State Arrays

Download now

Enabling enterprise machine and deep learning with intelligent storage

The power of AI can only be realised through efficient and performant delivery of data

Download now
Advertisement

Recommended

Visit/security/355013/10-quick-tips-to-identifying-phishing-emails
Security

10 quick tips to identifying phishing emails

16 Mar 2020
Visit/business-strategy/mergers-and-acquisitions/354941/panda-security-to-be-acquired-by-watchguard
mergers and acquisitions

Panda Security to be acquired by WatchGuard

9 Mar 2020
Visit/security/internet-security/354417/avast-and-avg-extensions-pulled-from-chrome
internet security

Avast and AVG extensions pulled from Chrome

19 Dec 2019
Visit/security/354156/google-confirms-android-cameras-can-be-hijacked-to-spy-on-you
Security

Google confirms Android cameras can be hijacked to spy on you

20 Nov 2019

Most Popular

Visit/software/video-conferencing/355138/zoom-beaming-ios-user-data-to-facebook-for-targeted-ads
video conferencing

Zoom beams iOS user data to Facebook for targeted ads

27 Mar 2020
Visit/infrastructure/server-storage/355118/hpe-warns-of-critical-bug-that-destroys-ssds-after-40000-hours
Server & storage

HPE warns of 'critical' bug that destroys SSDs after 40,000 hours

26 Mar 2020
Visit/software/355113/companies-offering-free-software-to-fight-covid-19
Software

These are the companies offering free software during the coronavirus crisis

25 Mar 2020
Visit/mobile/mobile-phones/355088/apple-lifts-iphone-purchase-restrictions
Mobile Phones

Apple lifts iPhone purchase restrictions

23 Mar 2020