Names and birth dates of nearly 200 people were uploaded to an unauthorised third-party site between March 2023 and September 2024.

Officers were using the software to trace and arrest suspected shoplifters.