Yes it is a data breach and the council should have reported it to the ICO as such.
Not a member of The Register? Create a new account here.
Remember me on this computer? Post anonymously?