Thank you for that statement, Cabinet Secretary. This is an astonishing data security breach affecting thousands of NHS workers right across Wales. At the moment, we know that NHS staff in the Betsi Cadwaladr University Local Health Board have been informed, all 654 of them. We know also that the Velindre trust has informed its members of staff, but, as yet, we’re unaware that other members of staff in all the other health boards across Wales have been actually informed. I wonder whether you could tell us today: when will they get to know about the fact that their personal details, including their dates of birth, national insurance numbers, alongside their names, have potentially been leaked to third parties and could be abused in terms of fraudulent activity? People can change their bank account numbers, they can change their passwords, but they cannot change their national insurance numbers. This is something that goes around with them for the rest of their life, and potentially this information could be misused five, 10, 15, 20 years down the line.

So, I wonder what action the Welsh Government is taking to ensure that health boards take their responsibility to inform staff very quickly seriously. Can you tell us why there has been a delay between the NHS having been informed of this breach and staff being informed? When did the Welsh Government first become aware of this data security breach, and why did we not receive at that time a briefing as Assembly Members in order that we could liaise with health boards and reassure our constituents about the problems that this might cause? And did the Welsh Government give instructions to sit on this information at all? I think these are important questions. I don’t doubt that there was some discussion between the Welsh Government and the health boards about this particular breach, but I wonder what advice was given to those health boards, when they became aware of the breach, about communicating with their staff. It’s very clearly the biggest data breech that I’ve ever been aware of in the NHS in Wales. It’s a serious breach, and we need to understand precisely how this happened and what can be done to prevent it from happening again in the future.