Bromcom SSO Personal Data Breach
What happened
An unauthorised third party temporarily accessed a limited part of Bromcom's network, retrieving certain SSO registration information relating to schools, specifically email addresses associated with SSO registration. According to a reported statement:
AI summary of accepted evidence. Check the original sources for the full context.
Reported impact
An affected population has not been established in the accepted evidence.
Reported data types
Source evidence
1Read the original reporting and statements. Multiple articles may rely on the same underlying source.
SSO Personal Data Breach FAQs – Bromcom – Documentation Centre
Retrieved 5 Nov 2026
An unauthorised third party temporarily accessed a limited part of our network, which we use to facilitate SSO registration.
Attributed reporting
1 more excerpt
the personal data involved is solely limited to email addresses associated with SSO registration.
Attributed reporting
Updates and corrections
All times UTCRevision 4
Data access revised. Disclosure date revised
Revision 3
Confirmation status revised. Data access revised. Disclosure date revised
Revision 2
Incident acknowledged. Affected data revised. Data access revised
Revision 1
Incident published