All Breaches
August 1, 2021 Verified Government

UK Electoral Commission Data Breach

Between August 2021 and October 2022, unauthorized actors accessed internal Microsoft Exchange servers and electoral register reference files maintained by the UK Electoral Commission (electoralcommission.org.uk).

40 Million
Affected People
3
Data Types
Critical
Severity
Oct 27, 2026
Last updated

Protect Yourself

Check whether you were affected by this breach

Check my email

Exposed Data Types

3
  • Names
  • Physical addresses
  • Email addresses

About This Breach

Publicly disclosed on August 8, 2023, and resulting in a formal reprimand from the UK Information Commissioner's Office (ICO) in July 2024, the compromise exposed personal data of approximately 40,000,000 individuals registered to vote between 2014 and 2022, including full names, residential addresses, and email correspondence held on Commission servers.

Verification and editorial method

LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.

Report missing or incorrect information