118 118 Data Breach in 2026: Victims of Latest Cyberattack Instruct The Data Leak Lawyers

New 118 118 data breach in 2026: Customers of 118 118 Money have begun receiving notifications about a serious cyber-attack.

According to the official wording of notices, on 26 October 2026 an unauthorised person reportedly gained access to customer information. The Data Leak Lawyers already act for clients. The exposed data reportedly includes names, contact details, dates of birth, addresses, income and expenditure information, and full bank account details (account name, number and sort code).

This combination of financial and personal data significantly increases the risk of fraud and identity misuse. We previously pursued action following the earlier 118 118 cyber-attack that affected call recordings.

New 118 118 Data Breach in 2026

The current incident appears to be much more serious because it involves live banking details and financial profile information rather than recordings alone. Under UK data protection law, individuals whose information has been compromised in this way may be entitled to compensation for distress and any financial loss. In comparable cases, data breach victims have recovered thousands of pounds.

The company has reported the incident to the Information Commissioner’s Office and is offering 12 months of free fraud-monitoring services. Whilst these steps are important, they do not remove the right to claim compensation. The presence of bank account details and income/expenditure data creates a higher risk profile than many previous breaches.

Victims may experience anxiety, the need to monitor accounts more closely, and the practical burden of protecting themselves against potential fraud.

Claims for Data Breach Compensation

This new 118 118 data breach in 2026 is a serious one. At The Data Leak Lawyers, we examine the notification, the categories of data involved, and the impact on each client. We can assess whether the organisation’s security measures met the standards required by the UK GDPR and the Data Protection Act 2018. Where the evidence supports a claim, we can pursue compensation for non-material damage (distress and anxiety) and any material losses that arise.

Our experience with the earlier 118 118 incident means we already understand the company’s systems and previous response patterns. Clients are advised to keep the notification email, note any suspicious activity on their bank accounts, and avoid responding to unexpected calls or messages that claim to be from 118 118 Money. The notification itself states that the company will never ask for a password and that additional security checks will always be explained. Anyone who receives a similar notice should treat it as formal confirmation that their data was involved.

What Compensation May Be Available

Successful claims in data breach cases involving banking and financial details have resulted in awards running into the thousands of pounds, reflecting both the sensitivity of the information and the ongoing risk of misuse. Compensation can be assessed individually and can cover emotional distress, time spent mitigating risks, and any proven financial harm.

Early specialist advice can improve the prospects of a well-supported claim and helps preserve evidence while it is still fresh.

If you have received a notification about the 118 118 data breach in 2026, or if you are a 118 118 Money customer concerned that your data may have been affected, contact The Data Leak Lawyers now. We can offer a confidential assessment of your position, clear advice on the strength of a potential claim, and dedicated support aimed at recovering the compensation you may be entitled to. Acting promptly protects your rights and allows us to begin the process while the details of the incident remain current.

Leaked Medical Data: How to Claim Data Breach Compensation with The Data Leak Lawyers