Notice to staff and former staff members: issue with SWAST CPD website
On Tuesday 21 July, we became aware of an issue with the SWASFT Continuing Professional Development (CPD) website (swastcpd.co.uk). The site was hosted and supported by an external supplier.
Following investigation, we understand someone may have gained unauthorised access to the website. Based on the information available, personal information relating to people who had accounts on the site may have been affected.
This may include:
- Name and SWASFT email address
- Personal contact details, such as a mobile number or email address, if supplied
- Work-related information, such as ESR number, job role and line manager
- This does not include payroll information or bank details.
- In some cases, information held in CPD or appraisal/Performance and Wellbeing Conversation (P&WC) records held before 8 December 2025.
The website was taken offline immediately after suspicious activity was identified.
At present, we have no evidence that any personal information was accessed or has been used inappropriately. However, as a precaution, we have reported the matter to the Information Commissioner's Office and are continuing to work with the supplier to understand what happened.
Please remain vigilant and look out for any unexpected communications, particularly emails requesting personal information or prompting you to click on links or open attachments.
We understand that this news may be concerning and sincerely apologise for any worry or inconvenience this incident may cause. Protecting the information entrusted to us is extremely important, and we are continuing to work closely with the supplier to understand the full circumstances of the incident and strengthen security arrangements.
If you have any questions or concerns, please contact the SWASFT Information Governance Team at sdplus.informationgovernance@swast.nhs.uk .