# Scottish NHS Trust Investigates Maternity Patients' Data Breach Personal data of 150 women mistakenly sent to a staff member's personal email account. - **Source:** [www.theregister.com - Articles (theregister.co.uk)](https://brifing.si/source/e6d4ec13-4d0e-407a-b96d-39609d76c3b1) - **Published:** 2026-07-10 - **Topic:** [Software & Engineering](https://brifing.si/c/engineering) - **Original article:** - **On Brifing:** https://brifing.si/s/d2e066f7-6f9d-472c-9472-f7b565c04761 ## Details of the Data Breach An NHS Forth Valley staff member sent personal data of around 150 women related to maternity services to their personal email account. The data included full names, dates of birth, NHS numbers, and pregnancy treatment information. The trust launched an internal investigation and confirmed the data has been deleted. ## Affected Patients' Reactions One of the affected women expressed anxiety about her personal data being exposed. NHS Forth Valley stated the data was transferred for analytical purposes by a qualified staff member. However, this incident has shaken patients' trust in the system. ## Measures Taken by the Trust NHS Forth Valley reported the breach to the UK Information Commissioner and Police Scotland. They contacted the affected women directly and emphasized the data wasn't shared further. This incident highlights NHS's problematic history with data security. ## NHS's History of Data Breaches The NHS has faced multiple email-based data breaches in recent years. For instance, Chelsea and Westminster and NHS Highland failed to protect HIV patients' data by using CC instead of BCC. Cambridge University Hospitals also exposed data in similar circumstances. ## Ironical Cybersecurity Event Breach One of NHS's most ironic breaches occurred during a cybersecurity event. Hundreds of email addresses were exposed due to failure to use BCC when sending emails to attendees. This showed even basic security measures can be overlooked. ## The Importance of Data Security This incident underscores the critical importance of data security in healthcare. Stricter measures are needed to protect patients' sensitive information. Large institutions like NHS must enhance staff training to prevent such mistakes. ## Sources covering this story - https://www.theregister.com/security/2026/07/10/scot-nhs-trust-probes-email-stuffup-involving-maternity-patients-data/5269749 — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._