FOI/202500462497 · FOI · partially withheld
Data breaches of the Oracle system: FOI release
Information requested
Information you hold that mention data breaches of the Oracle system.
Response
We have interpreted your request as relating to the data breach that was reported in limited press outlets in late March to early April 2025. As such I enclose a copy of some of the information you requested below. In some areas this information has been redacted under section 30(c), prejudice to effective conduct of public affairs of FOISA and section 33(1)(b), commercial interests of FOISA. A number of emails are also redacted in full under section 30(c), prejudice to effective conduct of public affairs of FOISA. Names of individuals have also been withheld under section 38(1)(b) exemption (personal data the disclosure of which would contravene data protection principles). As this request has been compiled an unexpected issue has arisen with our correspondence system which is not allowing two pieces of correspondence to be uploaded to this response. As such I will email those to you separately.
Exemptions are subject to the public interest test. In this instance sections 30(c), prejudice to effective conduct of public affairs is relevant as disclosing this information via Freedom of Information would make it less likely for public sector and private organisations to provide us information in confidence which is then disclosed publicly and would pose a significant risk to the organisation in being able to respond to future incidents, enhancing risk to both public services and government operations, as such withholding the information outweighs the public interest in disclosing it. Exemptions under section 33(1)(b), commercial interests are relevant as releasing details of commercial agreements would be likely to prejudice substantially the commercial interests of the Scottish Government and organisations with which the Scottish Government holds commercial agreements, as such withholding the information outweighs the public interest in disclosing it.
About FOI
The Scottish Government is committed to publishing all information released in response to Freedom of Information requests. View all FOI responses at https://www.gov.scot/foi-responses.
Detected exemption language
In some areas this information has been redacted under section 30(c), prejudice to effective conduct of public affairs of FOISA and section 33(1)(b), commercial interests of FOISA. A number of emails are also redacted in full under section 30(c), prejudice to effective conduct of public affairs of FOISA. Names of individuals have also been withheld under section 38(1)(b) exemption (personal data the disclosure of which would contravene data protection principles). Exemptions are subject to the public interest test. Exemptions under section 33(1)(b), commercial interests are relevant as releasing details of commercial agreements would be likely to prejudice substantially the commercial interests of the Scottish Government and organisations with which the Scottish Government holds commercial agreements, as such withholding the information outweighs the public interest in disclosing it.