Personal data breached as York council app hacked

City of York Council has stated that its One Planet York app was hacked by someone who found a way to access phone numbers, encrypted passwords and addresses of those using it.

The council has written to users to express its regrets over the breach, informing residents that the matter has been reported to North Yorkshire Police. The One Planet York app allows users to check bin collection dates and recycling advice.

The council was contacted by a hacker who said they had found a way to access the data of people using the app, although they cannot be sure what was done with the information he extracted from the hack. In total, 5,994 records were contained in the app and could have been breached.

Ian Floyd, deputy chief executive at the council, said: "On November 1 2018, a third party contacted the council and told us they had found a way to access personal data of those people who use the One Planet York app.

"The data accessed included personal information such as names, addresses, postcodes, email addresses and telephone numbers together with encrypted passwords. To our knowledge, the data accessed did not include any further sensitive information. In addition, the One Planet York is isolated from other council systems and therefore unable to access other personal data."

Please register to comment on this article