Weekly Industry News 10th November 25
Guide to Law Enforcement Processing
The Guide to Law Enforcement Processing is part of our Guide to Data Protection. It is for those who have day-to-day responsibility for data protection in organisations with law enforcement functions.
It explains the data protection regime that applies to those authorities when processing personal data for law enforcement purposes. It covers part 3 of the Data Protection Act 2018 (DPA 2018), which is separate from the UK GDPR regime.
Hundreds of residents’ details shared in data breach
A council chief has apologised after hundreds of residents’ sensitive data was mistakenly shared online.
Some names, addresses, phone numbers and email addresses of 625 people who responded to South Gloucestershire Council’s consultation on 24 October were published online for three days.
Once the error was spotted, council officers took “very prompt action” to remove the data and report the breach to the Information Commissioner’s Office (ICO).
Council accidentally publihsed hundreds of residents’ personal details – BBC News
Websites disabled in Microsoft global outage come back online
Websites for Heathrow, NatWest and Minecraft returned to service late on Wednesday after experiencing problems amid a global Microsoft outage.
Microsoft said some users of Microsoft 365 saw delays with Outlook among other services, but by 21:00GMT, many websites that went down were once again accessible after the company restored a prior update.
Microsoft Azure outage: Websites come back online – BBC News
Sneaky Mermaid attack in Microsoft 365 Copilot steals data
Microsoft fixed a security hole in Microsoft 365 Copilot that allowed attackers to trick the AI assistant into stealing sensitive tenant data – like emails – via indirect prompt injection attacks.
But the researcher who found and reported the bug to Redmond won’t get a bug bounty payout, as Microsoft determined that M365 Copilot isn’t in-scope for the vulnerability reward program.
Sneaky Mermaid attack in Microsoft 365 Copilot steals data . The Register
New Biometrics and Surveillance Camera Commissioner announced
Professor William Webster has been appointed as the new Biometrics and Surveillance Camera Commissioner, following an open competition and in line with the Governance Code on Public Appointments.
The role had been vacant since August 2024, with Francesca Whitelaw KC serving as Interim Biometrics Commissioner since 1 July 2025.
New Biometrics and Surveillance Camera Commissioner announced – GOV.UK
Capita fined £14m for data breach affecting over 6m people
We have issued a fine of £14m to Capita for failing to ensure the security of personal data related to a breach in 2023 that saw hackers steal millions of people’s information.
Capita plc has been fined £8m and Capita Pension Solutions Limited has been fined £6m, giving a combined total of £14m.
The cyber attack took place in March 2023. The personal information of 6.6 million people was stolen, from pension records and staff records to the details of customers of organisations Capita supports. For some people, this included sensitive information such as details of criminal records, financial data or special category data.
Capita fined £14m for data breach affecting over 6m people | ICO
Safeguarding, British Values & Prevent News
A British man who offered himself as a spy to assist the Russian Intelligence Service has been jailed for seven years
Howard Phillips, aged 66, was arrested after a series of interactions with undercover officers, whom Phillips believed were Russian agents.
In a series of meetings, Phillips offered to hand over personal details of a former cabinet minister and provide logistical support to Russian espionage activities.
Commander Dominic Murphy, head of Counter Terrorism Policing London, said: “This case demonstrates the serious consequences for anyone who thinks working on behalf of the Russian intelligence service is a way of earning easy money.
Counter Terrorism Policing statement following release of Prevent statistics
Counter Terrorism Policing’s Senior National Coordinator for Pursue and Prevent, Deputy Assistant Commissioner Vicki Evans, said:
“The latest Prevent statistics should act as yet another warning about the risks posed to our children by the online environment, and the extremist content they’re being exposed to.
“This year a record number of young and vulnerable people have been referred to Prevent because of concerns over radicalisation, with current trends indicating that these numbers will increase even more in the future.
Men appear in court charged with planning an act of terrorism
Two men, from Nottinghamshire and West Yorkshire, have appeared in court charged with planning to commit an act of terrorism following an investigation by Counter Terrorism Policing North East.
Oliver William Rea (07/04/2001) from Arnold, and Muhammad Bham (15/10/2006) from Dewsbury, appeared at Westminster Magistrates Court today (November 6) charged with Engaging in conduct in preparation of an act of terrorism, contrary to Section 5 of the Terrorism Act 2006.
Men appear in court charged with planning an act of terrorism | Counter Terrorism Policing
Goole man found guilty of planning a terrorist attack
A 21-year-old man has today (Monday, November 3) been convicted of planning an act of terrorism.
Jordan Richardson, from Goole, was also found guilty of multiple offences of possessing and disseminating terrorist information following a three-week trial at Leeds Crown Court. Sentencing will take place on December 15, 2025.
Richardson was arrested on December 19, 2024 by Counter Terrorism Policing North East, supported by Humberside Police, following an intelligence-led operation which discovered that he was preparing a terrorist attack.
Goole man found guilty of planning a terrorist attack | Counter Terrorism Policing