Quote from the original article :
"The database is said to contain sensitive information, such as contact information, address information and identity numbers and is distributed to the association’s 389 members on a monthly basis via e-mail. Members are then instructed not to contact people contained in the database."
"He confirmed that the information in the database included identity numbers, contact detail and addresses.
The Direct Marketing Association, however, confirmed that the database is not forwarded to anyone who is not a member of the association. The database is also secured by means of a password, which is not included in the email when sent to members."
Hello DMA, how could you ever expect to send out an email with Names, ID numbers and addresses to your members ("secured by a password" even though not sent with the email) and expect that it will not get into the "wrong hands".
FFS: In todays times this is Secure? People can be trusted with ALL the info in their hands?