Natural Resources Wales Data Breach Exposes Sensitive Employee Diversity Data

Gbhackers •Divya • September 7, 2026

Natural Resources Wales (NRW) has reported a personal data breach involving sensitive diversity-monitoring information from both former and current employees. The breach affected individuals whom NRW employed between April 2013 and March 2018. An internal investigation revealed that a spreadsheet containing employee data was accidentally published online, making the information accessible before the issue was […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Natural Resources Wales Data Breach Exposes Employee Diversity Information Natural Resources Wales (NRW) has reported a personal data breach involving sensitive diversity-monitoring information of former and current employees. The breach affected individuals employed between April 2013 and March 2018. An internal investigation revealed that a spreadsheet containing employee data was accidentally published online, making the information accessible. The disclosed data may include personal details related to ethnicity, disability status, religion, sexual orientation, and other equality monitoring information. NRW has taken steps to contain the incident, including removing the data from the website and reporting to the Information Commissioner’s Office (ICO). While there is no evidence of misuse, NRW advises affected individuals to remain vigilant for unexpected communications. The organization is reviewing its processes to prevent future incidents. 2 sources 39

Natural Resources Wales Data Breach Exposes Sensitive Employee Diversity Data

The full story

Extracted Entities

Attack Types (1)

Companies (1)