{
  "id": 18692144,
  "title": "NHS breach helpline left staff carrying a 'significant emotional burden'",
  "url": "https://urgent.news/2026/11/07/nhs-breach-helpline-left-staff-carrying-a-significant-emotional-burden",
  "topic": "health",
  "section": "Health & Medicine",
  "published": "2026-11-07T10:30:00.000Z",
  "source": {
    "name": "The Register Science",
    "slug": "the-register-science",
    "url": "https://www.theregister.com/security/2026/11/07/nhs-breach-helpline-left-staff-carrying-a-significant-emotional-burden/5308201"
  },
  "original_language": "en",
  "account": "The revelation of NHS staff handling a distressing helpline following a data breach has revealed the significant emotional toll on those involved. The Royal Cornwall Hospitals NHS Trust disclosed that the breach affected 8,003 individuals in November 2025, including current and former staff and non-trust workers. The data breach exposed personal data, including sickness absence records, which were previously considered too sensitive for Freedom of Information Act (FOIA) responses. Staff assigned to the helpline faced calls involving shouting, anger, and distress, with some callers potentially in danger from domestic abuse. Call handlers had to make safeguarding assessments without training or established processes, placing a considerable emotional burden on them. The review found that staff received minimal preparation for the calls and were expected to maintain their usual duties alongside the helpline responsibilities. Some staff members even gave up weekends and worked long past their scheduled hours to meet the demands. The breach occurred after a Freedom of Information request was mistakenly handled by the e-Rostering team instead of the People Information Unit, leading to the inclusion of sensitive data in the spreadsheet. Standard procedures were not followed, and the spreadsheet was not converted to a PDF, which would have prevented users from accessing the underlying records containing the sensitive data. The trust has since implemented changes to prevent a recurrence, including mandatory password protection of Excel workbooks and senior information governance approval of spreadsheet responses.",
  "summary": "Team given a day's notice faced distressed callers, safeguarding decisions during project that stretched from 2 weeks to 11",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}