Labour admits serious breach of private data in Croydon East

EXCLUSIVE by STEVEN DOWNES

Latte Labour: voters could have serious trust issues with the party in Croydon

The Labour Party has admitted that there was an attempt at electoral fraud conducted in its parliamentary selection in Croydon East, involving the compromising of the personal data of more than 500 members.

In a message sent to party members in the new parliamentary constituency this morning, Labour said it has reported the serious data breach to the Information Commissioners’ Office – an admission that the party had failed in its data protection duties.

They also admit that “some of the personal details of Labour members in the Croydon East constituency were altered on the Labour Party membership database without authorisation”.

Labour said that they have found evidence that email addresses, telephone numbers and postal addresses were interfered with – probably to provide advantage to one of the candidates seeking a “job for life” by being Labour’s General Election candidate in the new, very safe parliamentary seat.

Labour’s message to members also revealed that this electoral fraud began in September 2023 – the month before the Croydon East CLP was even formed.

Croydon East CLP was established after the party’s annual conference, with the objective of handling the affairs of a new constituency formed with bits of the previously marginal Croydon Central and parts of Tory stronghold Croydon South, as Croydon gets a fourth MP from the next General Election.

Business partners: from left, Mark and Maddie Henson with Labour Party General Secretary David Evans. The Hensons supply the Anonyvoter digital voting system to Labour

Today’s message is the only communication that members of the CLP have received in nearly four months, since Labour officials halted the dodgy process on the eve of the selection meeting. Three of the four candidates for selection are understood to have filed formal complaints about the process.

Croydon East CLP was formed with interim officials imposed on the organisation: former Croydon councillor Carole Bonner as chair, Melanie Fenton as secretary and Mark Henson, the co-owner of the Anonyvoter digital voting system used by Labour, as treasurer.

Croydon East CLP under Bonner, Fenton and Henson has never held a meeting, and members are still awaiting their first AGM – which was supposed to be staged in the autumn – for the opportunity to elect their own officials.

With time running out before the General Election, which could be held as soon as May 2, Croydon East members remain in the dark about when and how the parliamentary selection contest might resume. Likewise, the selection of the Labour candidate for the Croydon and Sutton constituency for the London elections, which will be held on the first Thursday in May, is also to be resolved.

The message distributed by the Labour Party this morning says:

Notification of Resumption of Croydon East and Croydon and Sutton Selections and outcome of membership data investigation

We are writing to you following the conclusion of an investigation the Labour Party has conducted as a result of receiving information on 22 November 2023 that the membership data for Croydon East appeared to include inaccurate information.

On 23 November 2023, the selection processes for the Labour Party Parliamentary candidate for Croydon East and the London Assembly candidate for Croydon and Sutton were paused, and all access to membership data was restricted shortly afterwards. This was so the information could be investigated, whilst also protecting the integrity of the Labour Party’s internal democratic processes. On 23 November 2023, we also informed the Information Commissioner’s Office that there had been a potential personal data incident.

The Labour Party takes the protection of your personal information and the rights of our members very seriously, which is why we have thoroughly investigated these matters and why we are now writing to inform you of the outcome of our investigation. We also wish to notify you of the next steps for both selections.

Our investigation has now shown that, from 8 September 2023 to 14 November 2023, some of the personal details of Labour members in the Croydon East constituency were altered on the Labour Party membership database without authorisation. The personal details that were amended included e-mail addresses, telephone numbers and postal addresses. We can confirm that no sensitive personal data, such as financial data, was affected by this incident. As a result, you may not have received all Labour Party communications that we tried to send to you during this period, including information about the Croydon East and Croydon and Sutton selection processes.

We want to assure you of the following important points in respect of this incident:

Following the careful remedial work undertaken by the Labour Party (with the support of its expert external advisors), we are confident that all of your personal details have now been restored on our systems. This means that we will imminently be able to recommence the Croydon East and Croydon and Sutton selection processes. It also means that any future communications from the Labour Party will be sent to the address provided to us by you.
Based on our extensive investigations into this incident, we do not believe that any of your data was removed from our systems. The issue appears to have been confined to the unauthorised amendment of some of the data on our systems.

We would like to remind you that you can check and update your Labour Party membership details by logging into Labour Hub. You can make any necessary updates to your personal information before ballots are issued for both selection contests.

If you are eligible to participate in either the Croydon and Sutton London Assembly selection and/or the Croydon East Parliamentary selection, the deadline for updating your personal information is 23:59 on Thursday 7 March 2024. The Labour Party will conduct additional checks on any changes made to personal information prior to this deadline to ensure they are legitimate.

Further information about the selection processes will be sent by the London Labour Party.

We sincerely apologise for any inconvenience this incident may have caused you. Any questions which you may have in connection with this incident should be directed to dataprotection@labour.org.uk.

Yours sincerely,

The Labour Party

Members who received the message today took some small consolation that they will, at long last, be able to pick their own prospective MP democratically, and not – as had been threatened – have them imposed by the party’s ruling NEC.

Unsafe pair of hands: Joel Bodmer, here with his Unison colleague Yvonne Green, was instrumental in Labour’s disastrous election campaign in 2022. He might yet be selected as a prospective MP

Pollsters at Electoral Calculus reckon that Labour has a 98% chance of winning the Croydon East seat – making it effectively a job for life for whoever it is that Labour puts on the ballot paper.

Croydon East Labour members were just days away from their first meeting when Labour’s London Region halted selection proceedings because of complaints of election fraud, ballot-rigging and fixes going on with the CLP membership lists.

“Several complaints already made to Labour national and London region HQs, especially over use of online votes,” Michael Crick reported at the time.

Members had already been denied any part in the short-listing process, with the four candidates all chosen by an unelected committee of unidentified officials from Labour’s London Region and the NEC.

Silent chair: former Croydon councillor Carole Bonner

The original four candidates were Olga Fitzroy, a councillor in Lambeth with a reputation for organising successful national campaigns in the music industry, Natasha Irons, a Merton councillor, Johnson Situ, a former Southwark councillor who now works for London Mayor Sadiq Khan, and Joel “Bodger” Bodmer, who has never been elected to any public office.

It has still not been made clear whether all of the candidates will go forward for selection under Labour’s revised timetable.

In the Croydon East parliamentary election, the Tories – with Jason Cummings, the Conservative councillor who helped push through last year’s 15% Council Tax hike – and the Greens – Peter Underwood – have already chosen their candidates.

Read more: #TheLabourFiles: MP Reed, Evans and the Croydon connection
Read more: The fix is in: Labour excludes members from Croydon selection
Read more:
Croydon Labour’s ‘hidden primary’ will choose a new MP
Read more: Labour’s NEC imposes selection shortlist on Croydon East


Inside Croydon – If you want real journalism, delivering real news, from a publication that is actually based in the borough, please consider paying for it. Sign up today: click here for more details


  • If you have a news story about life in or around Croydon, or want to publicise your residents’ association or business, or if you have a local event to promote, please email us with full details at inside.croydon@btinternet.com
  • As featured on Google News Showcase
  • ROTTEN BOROUGH AWARDS: In January 2024, Croydon was named among the country’s rottenest boroughs for a SEVENTH successive year in the annual round-up of civic cock-ups in Private Eye magazine

About insidecroydon

News, views and analysis about the people of Croydon, their lives and political times in the diverse and most-populated borough in London. Based in Croydon and edited by Steven Downes. To contact us, please email inside.croydon@btinternet.com
This entry was posted in Carole Bonner, Croydon Central, Croydon East, David Evans, Maddie Henson, Olga Fitzroy and tagged , , , , , , , , , , , , , . Bookmark the permalink.

14 Responses to Labour admits serious breach of private data in Croydon East

  1. Ken Towl says:

    I am a member – I just checked on Labour Hub – and, though my contact details are fine, I didn’t get the email. Conspiracy compounded by cock-up? I recently asked Carole and Melanie to update on what was going on but they do not even bother to reply. Members – and candidates – have been treated with disdain in Croydon East.

    • That’s unfair! It’s not disdain. It’s utter contempt. You really ought to know that by now…

      Any other Croydon East members who have not received the Labour Party message, do please email us at iC. We can’t guarantee that the Labour Party won’t be complicit in an effort to hack our site and emails again, but your feedback could prove important.

    • Tim says:

      Exactly the same experience for me. Carole Bonner blamed me for having turned off my email notification settings even though I have never changed them. I can see they are all on but I still don’t receive anything and only read about this today on this excellent website. Meanwhile I have been receiving emails asking me to renew my membership. Multiple emails to the membership team have gone unreplied, too.

      I’ll try dataprotection@labour.org.uk but I’m disgusted to be treated like this and after reading the email above I realise my personal data has been compromised and I have not been informed!

  2. John Evans says:

    You would have thought it would be a simple process to check who had access to the database between the dates the details were falsified and hold them to account.

    • Ian Terry says:

      There would also be a digital record of who accessed any secure database like that, so the Labour Party would easily be able to identify the culprit

      • This isn’t about identifying the culprit/s and holding them to account. It’s about letting them get away with it, covering things up, letting the dust settle, continuing to use the ludicrously-named and demonstrably insecure Anonyvoter software and stitching things up regardless.

        If that sounds far-fetched, bear in mind that Tony Newman, Simon Hall, Alison Butler and Paul Scott have been allowed by Labour to get away with what they did to Croydon, while they expelled Andrew Pelling and David White without even giving them a hearing

      • Anthony Miller says:

        I’m not sure there would. SQL is the normal language for interacting with relational databases and that hasn’t changed much since the 70s… it’s a command line language and doesn’t record IP addresses…. If someone was logged in remotely there might be a footprint like an IP address stored by the site login but you’d have to then work out who had access to that computer at what time and where it was which is pretty hard using a string of numbers and it wouldn’t tell you who changed each individual record… There might also be a number of computers logged in at the same time. It’s difficult… Not necessarily impossible. But even if you could establish who it was …making it stand up in court requires pretty solid evidence. Say you could establish the IP how would you find the actual computer responsible, it might never log on again? Clearly an offence has been committed under the Computer Misuse Act 1990. As Poirot would say we must look as the psychology of the crime, mon ami …

        Clearly the Party needs to drastically improve it’s Data Security

    • I don’t mind venality in politicians. Its what you expect. What I can’t stand is incompetence like this !

  3. I’m following this with utter amazement. What the f*** is going on and who benefits? And why isn’t this latest twist getting coverage in the hated mainstream media?? Even the Morning Star (still being published, amazingly) hasn’t returned to the scandal this year.

  4. Tyrone Nicholas says:

    So who was responsible? Who did it? Hard to see how it can happen with the connivance of party staff. Is there any investigation ongoing? Has this happened in other constituencies? Weird that there’s nothing said about it…

  5. Richard Dargan says:

    Sadly, the more one reads about the Labour Party in Croydon one wonders whether they deserve being voted for in a General Election – but then one looks at the others and there frankly is no decent choice. They all want to serve us the same old warmed up dreary gruel of policies and offer little to excite the electors or give them hope for a better future.

  6. Pingback: The Week in Cyber Security and Data Privacy: 4 – 10 March 2024 - Tech Sec

Leave a Reply