Cornwall Council experienced a data breach where personal details of multiple children, including their home addresses, were mistakenly sent to unrelated individuals via email. The incident involved school transport assistance records being dispatched to incorrect recipients, exposing sensitive information. The council issued an apology to affected parents and confirmed a full internal investigation is underway to determine the cause and prevent recurrence. While the breach was described as rare, it highlights vulnerabilities in the council’s data-handling procedures, particularly in safeguarding minors' personal information. No evidence of malicious intent or further exploitation of the leaked data has been reported, but the incident has raised concerns among parents and stakeholders about data security protocols within the local authority.

Cornwall Council accidentally published the personal details of five school children in publicly accessible meeting documents. The document contained the children's names, schools, home addresses, and dates of birth. As soon as the council became aware, the information was removed from the website, and the council apologized to the families.