At least it was reported
I know it doesn't mean that much, but at least the practice flagged it up to the ICO. It may be because it became public knowledge within the workplace or something, but it still got reported. I dread to think of the breaches that are dealt with on the 'hush-hush'.
Also no mention of a fine or reprimand for the practice so that suggests they were happy with their trainign and safeguards etc.