We focus on the latest news surrounding data breaches, leaks and hacks plus daily internet security articles.

We’ve been contacted for help and taken formal instructions forward following customers being notified of the recent Robert Dyas data breach.
We’ve agreed to act for victims affected by the incident on a No Win, No Fee basis. The incident appears to be similar to a number of the group actions we’re already involved with. This includes the British Airways data breach action, which is the first GDPR Group Litigation Order (GLO) in England and Wales; an action we’re on the Steering Committee for. If you’ve received notification that you’re affected by this incident, you can speak to our team now for free, no-obligation advice.
As a leading firm of consumer action and data breach compensation experts, we’re here to help you.

When all is said and done, the true cost of a data breach is worth avoiding for organisations as much as it should be recognised that they have a duty to protect people’s information.
It’s important that organisations are punished when they break the law, and it’s important that victims can access the justice that they deserve. That’s why we, as a leading consumer action and data breach compensation law firm, specialise in this complex and niche area of law. People have the right to seek justice and we can represent you on a No Win, No Fee basis for a legal case.
When you look at just how much it can cost to organisations financially, as well as to victims emotionally, it’s clear to see why avoiding a data breach is important.

The Carphone Warehouse data breach of 5th August 2015 was a significant event with some 2.4 million customers affected by a cyberattack.
We are taking cases forward for this breach and have been since news of the incident broke back in 2015. It’s not the first incident of its kind, but as we approach the three-year anniversary, there are some important warnings we must issue for those who have yet to start their legal case.
Here’s some vital advice about whether you can make a claim for compensation with us on a No Win, No Fee basis, as well as warnings about deadlines involved. As a leading consumer action and data breach compensation law firm, our experience speaks for itself when it comes to this complex and niche area of law.

GDPR fines and compensation claims for victims are two separate things with separate avenues for recovering money in either case.
Although the GDPR means that fines can now hit the millions, none of that money is designed to be for the victims. Money recovered from financial penalties will normally end up in the treasury with other general government funds like taxes and fines. It can then be used for government spending.
When it comes to justice for victims, you can speak to us about a separate legal action where you can bring a claim for data breach compensation.

The Dixons Carphone data breach fine has been formally issued by the Information Commissioner’s Office (ICO) for the maximum amount possible under the previous rules.
The cyberattack took place between July 2017 and April 2018, meaning the Data Protection Act 1998 applies as opposed to the GDPR that came into force just a month later. As such, the maximum fine that the retailer could face was £500,000.00, which is what the ICO has issued. Had the attack have continued into the GDPR era, they could have faced fines in the hundreds of millions of pounds mark.
We’ve been representing victims of this data breach for some time now as expert data protection compensation lawyers with a wealth of experience in large consumer actions. As we know a great deal about this breach as it’s one of our live actions, we’re not surprised by the findings and the maximum fine being issued.

It’s official: the first GDPR fine in the UK has been issued to Doorstep Dispensaree for data protection breaches that spanned across a two-year period.
This one involves medical data, which is some of the most personal and sensitive forms of data that there is. Medical data breach compensation claims account for a large proportion of the legal cases that we take forward because of how common they can be, and because of the impact on victims. The impact is often severe because this is the kind of information that we do not want to be misused or exposed.
The breach period, in this case, is between June 2016 and June 2018, which means that it just falls within the GDPR start period from May 2018. The Information Commissioner’s Office (ICO) was reportedly alerted to the breach by the Medicines and Healthcare Products Regulatory Agency (MHRA) who were conducting unrelated enquiries.

If you have been the victim of a social care records data breach, you may be entitled to make a claim for compensation with us on a No Win, No Fee basis.
One of the most common types of individual legal cases that we represent people for involve councils, and a large volume of them relate to social care information. Social care data can be incredibly personal and sensitive which is why we find that data breach compensation pay-outs for these kinds of incidents can be quite high.
Victims should always know their rights. An apology isn’t always enough, especially when the data that has been exposed or misused is sensitive, which can often be the case when it comes to social care data.

In the same way that fines can be far higher, will we also see higher GDPR compensation amounts since the new law came into effect in May 2018?
Although data breach compensation amounts are still based on the individual impact to the victim, and this hasn’t changed since GDPR, the new laws can make brining a claim an easier thing to do. The law is more stringent than the previous Data Protection Act, so there can be more avenues for people to be able to claim. And the recent court case victory has also paved the way for people to be able to launch a claim even if they haven’t suffered any distress or loss at all.
The difference in fines is, of course, monumental. We have already seen the power that regulators now have to ensure data breach offenders are properly punished.

Human error data breaches remain one of the number one causes when it comes to data protection incidents, and it’s important for victims of these kinds of breaches to know their rights.
The important thing to know is that it doesn’t stop you being able to claim if the cause of a breach stems from an error by a human. The organisation that employs the person can be held liable for a legal case, and in this article, we’ll explain why.
It’s not an acceptable excuse for an organisation to simply try and defend a claim on the basis that the fault lies with a human.

The Information Commissioner’s Office (ICO) has issued a fine in the wake of a documentary that was filmed that led to the Addenbrooke’s Hospital data breach relating to patient consent.
London-based production company behind the filming, True Visions Productions (TVP), were fined £120,000.00 for unlawfully filming in a maternity clinic. As the incidents took place before GDPR, they have been fined in accordance with the previous rules where maximum fines could reach up to £500,000.00; unlike the recent record-setting fine of £183m issued to British Airways.
Filming took place between 24th July 2017 and 29th November 2017 and ceased following complaints received by the ICO. The ICO said: “A patient attending the clinic would not have reasonably expected there to be cameras in examination rooms and would expect to be made aware of any filming.”
EasyJet admits data of nine million hacked
British Airways data breach: How to claim up to £6,000 compensation
Are you owed £5,000 for the Virgin Media data breach?
Virgin Media faces £4.5 BILLION in compensation payouts
BA customers given final deadline to claim compensation for data breach
Shoppers slam Morrisons after loyalty points stolen
Half a million customers can sue BA over huge data breach
Lawyers accuse BA of 'swerving responsibility' for data breach
The biggest data breaches of 2020
Fill out our quick call back form below and we'll contact you when you're ready to talk to us.