“Most call handlers only learned that their own data had been exposed while already working on the helpline, sometimes minutes before supporting others affected.”
The breach was a pivot table in a FOI spreadsheet that sat online for nearly three years. The trust then gave its staff a day’s notice to man the phones, with no training and a script that showed up 30 minutes before launch. Some callers were domestic abuse victims. “It runs on goodwill” is not a security plan.