2026 Natural Resources Wales — employee diversity spreadsheet published on website
Data compromised
Employee diversity/equality monitoring data for staff employed Apr 2013–Mar 2018: ethnicity, disability, religion/belief, sexual orientation, Welsh language ability, caring responsibilities, and related fields (not all categories for every person)
Technical writeup
Verified Natural Resources Wales statement — September 4, 2026. NRW said a spreadsheet containing employee information was inadvertently disclosed on its website, affecting individuals employed April 2013–March 2018. Diversity-monitoring fields may have included ethnicity, disability status, religion or belief, sexual orientation, Welsh language ability, caring responsibilities, and other equality data. Contained by removing the file, confirming deletion, reviewing related publications, and reporting to the UK ICO. No evidence of misuse stated; headcount not published. recordsAffected 0; companyConfirmed true.
Root cause
Accidental public disclosure of HR/diversity spreadsheet on website