Premier League side West Ham United "could face a data breach investigation over allegations bungling staff twice shared personal details" of hundreds of season-ticket holders in a round-robin email, according to Tom Morgan of the London TELEGRAPH. Angry fans "took to Twitter" to complain their names were "among up to 200 email addresses on a blanket message sent out to confirm tickets" for next week's English Football League Cup match against League One side AFC Wimbledon. It is claimed that West Ham "sent out an apology" but repeated its "same mistake by listing in carbon copy, instead of transferring them to BCC." West Ham supporter Nick Marsh tweeted, "West Ham sharing 500 odd email addresses. Tried to rectify it, and in doing so shared the addresses again. Typical West Ham. Shambles." Legal firm Oury Clark partner Ben Robson said that the breach was a "potentially notifiable issue for the Information Commissioner's Office." Robson said, "This would be a data breach because the purpose supporters gave their addresses to West Ham was not for it to be shared with every Tom, Dick or Harry." West Ham supporter Jack Lebeau tweeted, "West Ham's email to away season ticket holders confirming their ticket for Wimbledon has cc'd in every single person who has got the ticket. Massive data breach for a top PL club, Fine can be up to 4% of annual income. Hugely embarrassing for club" (TELEGRAPH, 8/23).
