Brittan said she had previously been offered compensation for another data breach by the Met, after they disclosed sensitive information about her first police interview by mistake to two people in Australia.
Speaking about the latest breach, the 61-year-old told the : “It’s very shocking because they were meant to have learned all lessons and it would never happen again.
“And although the first one was far more egregious because it was very sensitive data that was sent to Australia, I was promised that they had learned and the same thing couldn’t happen again.
She added that many of Al Fayed’s alleged victims would be distressed by the breach, saying: “For me, it’s more of the same, really, and deeply re abusive, to be honest. It’s unbelievable.”
Dame Jasvinder Sanghera, the advocate for survivors of alleged abuse by Al Fayed, told the : “I have had so many contacts today from survivors who have told me that they feel violated by the police in a space where there is already a lack of confidence in the police investigation.
“They said they received an insipid apology five hours later and, I am sorry, it is just not good enough.”
Brittan first reported allegations to police in 2017.
According to correspondence previously supplied to the , she alleged she was sexually abused by Ahmed Obaidly, a former United Arab Emirates diplomat and associate of Al Fayed, after working for a company linked to the UAE royal family in the early 1990s.
The Met has said the original report, made to Devon and Cornwall Police in 2017, was transferred to London because the alleged offending took place within its jurisdiction. It said the case was initially investigated as a rape allegation against Obaidly, who died in 2015.
The force has also said criminal allegations concerning Mohamed Al Fayed were made in 2024 and now form part of Operation Cornpoppy, which remains ongoing.
In correspondence previously provided to the , the Met said: “The live investigation into those who could have facilitated or enabled Mohamed Al Fayed’s offending continues.”
The force added that victim-survivors remained its priority and said it was committed to providing updates to those involved in the investigation.
The latest incident comes shortly after the ICO took enforcement action against the Metropolitan Police over two unrelated data breaches.
In a decision published on 5 August, the watchdog issued the force with a reprimand and enforcement notice after concluding it had failed to put in place appropriate technical and organisational measures to protect personal information.
The ICO said its investigation had uncovered “serious and ongoing shortcomings” in data protection training.
It also found wider weaknesses in policies, procedures and assurance arrangements for handling sensitive personal data.
One breach involved an officer disclosing a stalking victim’s new address and telephone number to her alleged stalker.
As part of its enforcement notice, the ICO ordered the Metropolitan Police to improve its data protection training compliance, monitoring and governance arrangements.