The Metropolitan Police Service has acknowledged a significant data security failure concerning the ongoing investigation into allegations against the late Mohamed Al Fayed. The force confirmed that a recent email sent to individuals who had registered for monthly updates regarding the case inadvertently revealed the personal email addresses of all other recipients. By failing to use the 'blind carbon copy' (BCC) function, the police exposed the contact information of everyone on the mailing list to one another.

In a statement, the Metropolitan Police apologized for the error, describing it as a human mistake. The force has since contacted the Information Commissioner’s Office (ICO) to report the breach, as is standard procedure for data protection violations. The incident has raised concerns regarding the handling of sensitive information, particularly given the high-profile and delicate nature of the investigation into the former Harrods owner.

While the police have characterized the incident as an administrative oversight, the breach has prompted questions about the protocols in place for communicating with victims and witnesses. The force has stated that they are reviewing their internal communication processes to ensure such a disclosure does not happen again. As of now, there has been no indication that the breach involved more sensitive data beyond the email addresses of those who opted into the update service. The investigation into the allegations against Al Fayed continues, with the police maintaining that they are committed to supporting those who have come forward.