Rise in employee data breaches for the third year running

Employee data breaches have risen for the third year in a row, driven in part by the challenges of hybrid working.

Analysis of regulatory data shows that breaches involving employee information reached a seven-year high of 3,872 in 2025, up from 3,680 the previous year. While cyber-related incidents fell slightly, non-cyber breaches, such as lost or mishandled physical documents, rose significantly.

Experts note that while organisations have strengthened digital security, many have not updated their physical and procedural safeguards to match new working patterns.

Common issues include lost or stolen laptops, paperwork left in public areas, and emails sent to unintended recipients. In one high-profile case, a government official left a laptop containing sensitive information unattended on public transport, and other incidents included the use of insecure systems and accidental sharing of confidential data.

The rise in breaches is linked to employees splitting time between multiple locations, increasing the exposure of sensitive information such as HR and payroll records, medical details, disciplinary files, and identity documents. Human error and insufficient training remain major contributing factors, with many incidents occurring unintentionally rather than through malicious action.

Practical, ongoing training is recommended to align policies with the realities of hybrid work and reduce the likelihood of accidental data loss. Simplifying systems and workflows, reducing unnecessary data movement, and clearly defining procedures can also help employees manage information securely. Organisations are legally responsible for safeguarding employee data and can face claims even when breaches occur accidentally.

Should you require further support to manage sensitive data, contact 121 HR Solutions at enquiries@121hrsolutions.co.uk.

Rise in employee data breaches for the third year running

121 HR Solutions Ltd