A data breach in the U.K. exposed personal information for every one of the 18,105 residents of Wales who tested positive for COVID-19 from Feb. 27 to Aug. 30. Public Health Wales, the national public health agency, first disclosed the breach on Monday, saying it was the result of “individual human error” The PII was “uploaded by mistake to a public server where it was searchable by anyone using the site” The exposed information included their initials, date of birth, geographical area and gender, meaning that the risk of identification is low.”]