Merseyside taxi drivers have had their personal details inadvertently exposed online due to a flaw in a new Taxi Licensing computer system. The sensitive information, including full names and home addresses, became visible following the system’s implementation in April 2024. This breach went undetected until September 5, 2024, potentially exposing drivers’ data for approximately five months. Screen grabs and recordings from Sefton Council’s licensing portal confirm that the exposed data could be accessed through searches by name and partial postcode, revealing detailed personal information of licensed drivers.
The issue was identified when media reports brought the breach to light, prompting immediate concern among affected drivers. The breach allowed individuals to view personal details by searching for names or postcodes, which highlighted vulnerabilities in the system’s data protection measures. Sefton Council has confirmed that they are conducting an urgent investigation to determine the cause of the breach and the steps required to prevent a recurrence.
In response to the breach, Sefton Council has issued a formal apology to the impacted individuals and assured that they are working with their provider to address the issue. The council has emphasized their commitment to enhancing data security measures to safeguard personal information and prevent future breaches. They are also reviewing their data protection policies and practices to ensure compliance with industry standards.
The exposure of this sensitive data underscores the broader issue of data security in public sector systems. It highlights the need for rigorous security protocols and regular audits to protect personal information from being inadvertently exposed. As Sefton Council continues its investigation, affected drivers and the public are advised to stay vigilant and monitor any unusual activity that could result from this breach. Further updates on the investigation and remedial measures will be provided as more information becomes available.
Reference: