ICO to make enquiries into El Reg email snafu
The Register accidentally sends out email addresses and names of 46,524 of its readers.


The Information Commissioner's Office (ICO) is to look into a data blunder at The Register tech publication, which saw email addresses and names of thousands of readers exposed.
The Register accidentally sent 3,521 people the names and email addresses of 46,524 readers between 08:58 and 10:20 BST yesterday.
In a contrite tone, somewhat different from its typically irreverent manner, the publication took to its website to explain why the error occurred.
"Obviously, this was an error. The two-stage send process that is the norm for all of our mailers was over-looked because someone was in a hurry," the Register said.
"We would like to offer our genuine and humble apologies for the error. If you would like to vent at that someone, their email address is here: data@theregister.co.uk."
The Register was quick to contact the ICO about the breach. The data protection watchdog said it will investigate the matter before it takes any action.
The two-stage send process that is the norm for all of our mailers was over-looked because someone was in a hurry...
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
"We are aware of a possible data breach which may involve The Register," an ICO spokesperson said.
"We will be making enquiries into the circumstances of the alleged breach of the Data Protection Act before deciding what action, if any, needs to be taken."
The ICO has been quiet in handing out fines of late. The regulator needs proof people have been genuinely harmed by a data breach before it issues any monetary penalties.
Whilst in the case of The Register the data breach was not immediately serious, hackers could still use the emails to either spam or compromise accounts.
Given how simple people's passwords often are, just having an email address can be enough to inspire a cyber criminal to break into an account.
The Register felt the pain of a hack attack earlier this year when a number of domain registrars were compromised. Attackers changed Domain Name System (DNS) records to redirect Register readers to another site.
Tom Brewster is currently an associate editor at Forbes and an award-winning journalist who covers cyber security, surveillance, and privacy. Starting his career at ITPro as a staff writer and working up to a senior staff writer role, Tom has been covering the tech industry for more than ten years and is considered one of the leading journalists in his specialism.
He is a proud alum of the University of Sheffield where he secured an undergraduate degree in English Literature before undertaking a certification from General Assembly in web development.
-
Westcoast named as full-service distributor for Kyocera’s A4 print solutions
News The new agreement will see Westcoast act as a “one-stop shop” for Kyocera’s ECOSYS A4 devices, consumables, and support
-
Everything we know about the Allianz Life data breach so far
News The company has confirmed in a filing that data was accessed earlier this month
-
Scania admits leak of data after extortion attempt
News Hacker stole 34,000 files from a third-party managed website, trucking company says
-
23andMe 'failed to take basic steps' to safeguard customer data
News The ICO has strong criticism for the way the genetic testing company responded to a 2023 breach.
-
Cyber attacks have rocked UK retailers – here's how you can stay safe
News Following recent attacks on retailers, the NCSC urges other firms to make sure they don't fall victim too
-
ICO admits it's too slow dealing with complaints – so it's eying up automation to cut staff workloads
News The UK's data protection authority has apologized for being slow to respond to data protection complaints, saying it's been overwhelmed by increased workloads.
-
AI recruitment tools are still a privacy nightmare – here's how the ICO plans to crack down on misuse
News The ICO has issued guidance for recruiters and AI developers after finding that many are mishandling data
-
“You must do better”: Information Commissioner John Edwards calls on firms to beef up support for data breach victims
News Companies need to treat victims with swift, practical action, according to the ICO
-
LinkedIn backtracks on AI training rules after user backlash
News UK-based LinkedIn users will now get the same protections as those elsewhere in Europe
-
UK's data protection watchdog deepens cooperation with National Crime Agency
News The two bodies want to improve the support given to organizations experiencing cyber attacks and ransomware recovery