Claiming compensation for a security breach

You can be entitled to claim compensation for a security breach, and we can offer No Win, No Fee representation for victims who put their trust in us.

As a leading firm that specialises in data breach compensation law, thousands of people have been coming to us for our expert help for years. We launched our first group legal case back in 2015 when data compensation was an emerging area of law, and many of the dozens of actions that we now help people for involve security breaches. In fact, the first GDPR Group Litigation Order (GLO) that we’re on the Steering Committee for – the BA Group Action – stemmed from a security breach.

Victims can contact our team for free, no-obligation advice about their options for compensation.

Can you claim compensation for a security breach?

Victims can be entitled to claim compensation for a security breach. If the breach was preventable then the basis for the case can be that the opponent has failed to protect your information, which they have a legal duty to do.

There are many ways a security breach can occur that can lead to a victim being eligible for compensation, and they can include:

• Data being accessible either internally or even externally online when it shouldn’t be;
• Successful cyberattacks where the organisation reasonable for the data has failed to implement adequate security measures. The Equifax group action we’re involved in is a good example of this, where they failed to patch a known security vulnerability for months that was then used by hackers to steal information;
• Poor passwords and credentials that are hacked;
• Unencrypted data being exposed;
• Leaks of information where it has been sent to the wrong person.

These are just some examples that can lead to a successful claim for data breach compensation. As our team can offer a free claims assessment, it’s always best to speak to us to see if we’re able to help you.

What can you claim for?

There are a number of factors that we can look at when it comes to a claim for compensation for a security breach.

Victims can be entitled to compensation for the distress caused by the loss of control of personal information. Data breach pay-outs can be based on the extent and severity of any suffering, which can depend on how the victim has personally suffered, as well as matters like the nature of the information exposed. We often find that particularly sensitive cases like medical data breach claims can lead to higher valuations because this kind of information can be very sensitive.

Victims can also be entitled to receive compensation for any losses and expenses incurred as well. This can cover money stolen as a result of theft and crimes like identity fraud, and it can also cover costs you may have to pay out: for things like extra security or to deal with the aftermath of a breach. The idea is that you shouldn’t be out of pocket as a result of a breach, which means that reasonable losses and expenses can be recoverable.

Launching a formal case

It’s important to remember that the ICO (Information Commissioner’s Office) can issue fines for breaches, but that this money isn’t designed to be used for compensation.

Victims must make their own separate claim for compensation for a security breach, and that’s what we do for people.

When you speak to our team, we can normally tell you right away if we think you have a case. We can then – if you like – take your instructions to get a legal case set up for you right away.

GDPR breach compensation amounts

Has my data been breached?