Kennedys Law, a London-based law firm, accidentally leaked the email addresses of 194 individuals and law firms involved in the Church of England’s (CoE) redress scheme for victims of abuse. The breach occurred due to human error, exposing recipients' details to all addressees in a mass email. Attempts to recall the emails were only partially successful, leaving victims—many of whom had suffered historical abuse by CoE officials—vulnerable to further harm. The firm reported the incident to regulatory bodies (Charity Commission, ICO, Solicitors Regulation Authority) and launched an internal investigation. The CoE, though not the data controller, expressed deep concern, emphasizing the breach’s potential to erode trust in the redress process. The exposed individuals included survivors of abuse by priests and bishops, compounding their trauma. The firm apologized unreservedly, acknowledging the significant emotional and reputational impact on those affected.