Met Police expose 143 Al Fayed victims' emails in data breach

The Metropolitan Police revealed the email addresses of 143 victims of Mohamed Al Fayed in a group update sent on 11 August. The force acknowledged the breach, which occurred when a distribution list error made recipients’ addresses visible to others. A spokesperson told the Telegraph the incident was caused by human error and was identified quickly.

The email was part of a monthly update to victims signed up to the force’s distribution list. It informed them that three more suspects, aged in their 70s and 80s, had been interviewed under caution. This brings the total number of people interviewed under Operation Cornpoppy to seven. The force has referred itself to the Information Commissioner’s Office.

Victims contacted directly after breach

A Met Police spokesperson said everyone affected by the breach was contacted on the same day. The force described the incident as a priority and said it was reviewing its processes to prevent a recurrence. The spokesperson added that the force understood the potential impact on victims and offered an apology.

More than 400 allegations of sexual misconduct have been made against Al Fayed, spanning from 1977 to 2014. These include claims of rape, sexual assault, human trafficking, false imprisonment, drugging, physical violence and forced abortions. The Egyptian businessman, who owned Harrods and Fulham Football Club, died in 2023 without facing charges.

Victims criticise Met’s handling of allegations

The Met’s approach to the case has faced criticism from victims. In June, three survivors complained to the Independent Office for Police Conduct about the force’s handling of allegations between 2018 and 2024. That same month, the Met sent the handwritten account of survivor Joanna Brittan to another victim in Australia.

Operation Cornpoppy, launched 21 months ago, investigates potential suspects who may have facilitated or enabled Al Fayed’s alleged crimes. The Met has received allegations from at least 155 victims, 21 of whom came forward before Al Fayed’s death. Lawyers representing the Justice for Fayed and Harrods Survivors group say 421 people have reported abuse linked to the former Harrods owner.

Calls for wider investigation into trafficking

Victims have urged the National Crime Agency to establish a joint investigation team with the Met. The collective No One Above, founded by victims of abuse linked to Al Fayed, argues that without a wider inquiry, the full scale of the alleged network will remain hidden. The Met confirmed it is investigating allegations involving locations including Harrods, the Ritz hotel in Paris and Fulham Football Club.

In May, the IOPC launched an investigation into a serving Met officer and four former officers over their handling of allegations against Al Fayed. The force has not disclosed whether this investigation is linked to the recent data breach.

What happens next

The Information Commissioner’s Office will assess whether the Met breached data protection laws. The force has not stated how long its internal review will take. Operation Cornpoppy continues, with no timeline given for further interviews or potential charges. Victims’ groups have called for greater transparency and faster progress in the investigation.