Met Police apologises for data breach involving alleged Al Fayed victims

Metropolitan Police Issues Apology After Victim Email Addresses Exposed in Data Breach

Constantvpn.com – The Metropolitan Police has formally apologized following an inadvertent disclosure of email addresses belonging to approximately 140 individuals who allege they were sexually abused by the late Harrods owner Mohamed Al Fayed. The error occurred when Scotland Yard distributed a monthly victim update using standard email copying rather than blind copying, making recipients’ addresses visible to one another.

According to officials at Scotland Yard, the technical mistake meant that everyone on the distribution list could see each other’s contact information. The update, which was sent on August 11, also announced that three additional suspects—individuals in their seventies and eighties—had been interviewed under caution, raising the total number of people questioned to seven.

Investigation and Response

The force has referred the incident to the Information Commissioner’s Office and is currently evaluating additional support measures for affected victims. A spokesperson for the Met Police explained that the monthly update regarding Operation Cornpoppy contained progress details about the investigation into individuals who may have facilitated or enabled sexual offending by Al Fayed.

“Due to human error, recipients’ email addresses were visible to others on the distribution list. The issue was identified quickly and immediate action was taken.”

The spokesperson emphasized that everyone affected was contacted directly on the day the incident occurred. The force noted that while recipients had been divided into smaller groups—meaning email addresses were only visible within those groups rather than across the entire cohort—the breach still affected those who had opted in to receive updates from the investigation team.

Victim Impact and Concerns

The latest disclosure is expected to generate renewed scrutiny regarding how the Metropolitan Police manages sensitive survivor information. Campaigners have consistently highlighted the critical importance of protecting the identities of individuals involved in investigations into sexual abuse and trafficking, citing potential consequences for victims’ wellbeing and privacy.

Joanna Brittan, a campaigner from Devon who waived her automatic lifelong right to anonymity, learned that her email address had been shared with dozens of other survivors. In correspondence with senior officers, Brittan wrote that her address had been disclosed to 42 other survivors, and she had similarly gained access to their email addresses.

“I consider this to be a further personal data breach by the Metropolitan Police Service,” she wrote, describing the incident as particularly serious because recipients were identifiable as people connected to a highly sensitive criminal investigation.

Brittan, who is 61 years old, noted that she had previously received compensation for another Met data breach when the force mistakenly disclosed sensitive information about her first police interview to two individuals in Australia. She expressed disappointment that what was supposed to be a lesson learned had occurred again.

“It’s very shocking because they were meant to have learned all lessons and it would never happen again. And although the first one was far more egregious because it was very sensitive data that was sent to Australia, I was promised that they had learned and the same thing couldn’t happen again.”

Broader Context and Implications

The Met Police has previously stated that 154 victims have reported allegations connected to Al Fayed, with supporting survivors remaining central to the investigation. The force confirmed that the incident had been formally recorded within investigation records and that they would continue monitoring the circumstances and impact of the breach.

Officials indicated they are reviewing alternative methods of updating victims that would reduce the risk of human error. The force added that victim-survivors remain its priority and that it is committed to providing updates to those involved in the investigation.

For many alleged victims, the breach represents a continuation of institutional missteps. Brittan described the experience as deeply re-abusive, noting that the incident felt like “more of the same” and calling it unbelievable that such an error could occur after previous promises of improvement.

The situation underscores the delicate balance law enforcement must maintain when handling sensitive cases involving vulnerable individuals. As Operation Cornpoppy continues to progress, the Met Police faces ongoing pressure to demonstrate that it has implemented robust safeguards to protect victim privacy while maintaining transparent communication with those affected by the investigation.