Two organisations supporting Welsh children and families are affected by a 2024 ransomware incident after attackers accessed an account protected only by the passcode “Password1”. The information compromised includes children’s data, and the case is now being examined by the UK data protection watchdog.

The Information Commissioner’s Office (ICO) criticises security failings connected to a Welsh local government data unit and an IT service provider. Coverage across outlets focuses on the scale of the theft (“thousands” of children) and the unusual factor that a single, well-known password—“Password1”—was used, with each outlet tying the breach to the November 2024 attack date.

Differences are mainly in framing: some reports lead with the breach’s impact on children’s data, while others emphasise the ICO’s findings about the organisations’ security shortcomings.