---

Ministry of Defence: Data Protection

Answer

The number of personal data incidents that have been correctly reported to the Army Warning Advice and Reporting Point (WARP) that have affected Defence Children Services schools and settings since 2010 and the number of affected individuals that have been affected by personal data incidents related to Defence Children Services schools and settings in each year since 2010 is as below:

Incidents	Affected Individuals
2010	0	0
2011	0	0
2012	0	0
2013	0	0
2014	0	0
2015	0	0
2016	1	61
2017	0	0
2018	0	0
2019	2	270
2020	1	1
2021	3	4184
2022	6	21
2023	9	459
2024	2	29
Totals	24	5025

This data has been taken from Blackthorn Defence Incident Management Database (BT DIMDb) (which is directly fed by the Security Incident Reporting Forms (SIRFs) used across Defence) and the Army WARP Security Incident Database (SID).

It is not possible to split the affected individuals down into the categories stipulated in this question as that distinction is not made during reporting or investigation. It should also be noted that the number of people impacted is determined during the course of the investigation.

The 2021 figures include a major investigation into a cyber incident at a single school, which resulted in the potential compromise of 1110 internal (Ministry of Defence) email addresses and 3070 external (personal) email addresses.

Secondary information

Type

Written question

Reference

25424

Session

2023-24

Grouped for answer

Yes

Subjects

Children Data protection Armed forces Civil servants Families Ministry of Defence Schools

Contains statistics

Yes

Link

View this Written question on www.parliament.uk