it's crazy how mistakes like this can happen again
i mean, it's not like they just forgot to lock the website or something... the ICO is right though, it was entirely preventable
the post office should be more careful with their online publishing and staff training. £1.09m seems pretty harsh for a mistake that could've been avoided
but at the same time, you can't just let this slide without any consequences
maybe they should've accepted the fine to set an example? still, it's not like anyone was actually harmed by the leak... unfortunately, this is just another reminder of how vulnerable public orgs are when it comes to data protection 