Crime victims data appears on police website

According to a report on the BBC tech website, an English Police force is evidently investigating after the personal data including names address, date of birth and offence details of an undisclosed number of victims was wrongly published to a page on their own website.

The data was removed quickly once noticed, but it is hard to understand how this could happen. An apology has been made, along with a statement that they take their data protection obligations very seriously.

The BBC report of the story is at

With the appropriate technical and data protection controls in place, this should never happen. I wonder if there was a DPIA, and what training people had?