FOI 25-540 - Data Breaches
Freedom of Information Request
- Reference
- FOI 25-540 - Data Breaches
- Request Date
- 19 Nov 2025
- Response Date
- 23 Dec 2025
- Information Requested
- The number of data breach incidents the service has had in the last three years (Broken down by financial years 2022/23, 2023/24 and 2024/25) - Clarified to include all Information Security Incidents
- How many compensation claims have been brought against the service for data breaches in the last three years (Broken down by financial years 2022/23, 2023/24 and 2024/25)
- Of those, how many were settled with compensation and how many were refused?
- How much has the service paid out in compensation for data breach claims in the last three years? (Broken down by years as above)
- Response
The Scottish Ambulance Service holds information on data breaches as yearly figures. Please see the total number of incidents where a data breach has been confirmed for each year since 2022.
01/01/2022 - 31/12/2022 - 55 confirmed breaches
01/01/2023 - 31/12/2023 – 63 confirmed breaches.
01/01/2024 - 31/12/2024 – 31 confirmed breaches.
01/01/2025 - 30/11/2025 – 26 confirmed breaches.
For the financial years 2022/2023, 2023/2024 and 2024/2025 there have been <5 compensatory claims made relating to data breaches. These breaches have either been closed/repudiated or are ongoing and therefore no payments have been made during this period.
We have applied section 17 of the Freedom of Information Scotland Act 2002 to Q2b. The dataset that helps us identify the reason for the claim (i.e. Data Breach), does not contain payment date information. Payment information is not held in a way that we can attribute reason. It is for this reason this information is not held.
