Affected by a cyberattack? Claim compensation today

If you have been affected by a cyberattack, you could be eligible to make a claim for compensation with us on a No Win, No Fee basis.

As a leading firm of consumer action and data breach compensation lawyers, we’re involved in over 40 separate group actions and we represent victims for individual cases too. We represent thousands of clients and have been doing so for a long time; a great deal longer than most other firms working in this complex and niche area of law. As such, we fully understand the impact of a data breach for the victim.

Here’s how we can help you.

Have you been affected by a cyberattack?

We understand how bad it can be when a victim is affected by a cyberattack. We know that it can cause considerable distress, and there’s the added worry of money being lost as well.

This is why the law can entitle victims of a data breach, like a cyberattack, to be able to claim compensation. If we consider that the breach has arisen from negligence, we may be able to pursue a case for you on a No Win, No Fee basis.

In many cases we have been involved with, a cyberattack has succeeded because the organisation hit by the attack failed to take adequate steps to protect the data they hold. Some examples for cases we’re involved with where this applies includes:

• The British Airways data breach which has since resulted in the first GDPR Group Litigation Order (GLO) in England and Wales, and we’re on the Steering Committee for it;
• The Equifax data breach of 2017 which stemmed from a failure to patch a known security vulnerability;
• The Ticketmaster data breach which is similar to the BA one. We launched legal action way back in July 2018 for this one, just weeks after the incident was confirmed.

Claiming compensation

You could be entitled to make a No Win, No Fee claim for data breach compensation if you have been affected by a cyberattack.

Usually, there are two primary things that we can consider when we take a case forward, which are:

• Compensation for the distress caused by the loss of control of your personal information; and
• Compensation to recover any losses and expenses incurred.

For the distress element, this is about the emotional impact of your data being exposed to someone else. This can be worsened when we know the information is in the hands of people who may exploit it for malicious purposes. The control that you once had has now gone, and the law recognises how this can impact a victim.

Data breach compensation values will typically be based on factors such as:

• The nature of the data exposed;
• How much information is involved;
• How far the loss of control extends;
• The personal impact, which can differ between people.

When it comes to losses and expenses, this typically involves money lost from fraud events after a cyberattack. If the fraud incident is directly linked to the cyberattack, you should be able to recover the lost money.

You do not have to have suffered any actual loss to be able to claim, and you can pursue a case of either one or both of the above elements. Anyone affected by a data breach can speak to our team today for free, no-obligation advice about their options for justice.

When cyberattacks are not revealed right away…

Victims affected by a cyberattack deserve to know that their data has been misused or exposed as soon as possible. In fact, the GDPR means that there’s a duty on an organisation to alert victims ASAP.

But this doesn’t always happen. Sometimes the reason for this is because the organisation hasn’t realised that they have been hit by a cyberattack, but others have allegedly kept it secret for a period of time. Organisations should not be hiding data breaches as the victims need to know immediately so they can take appropriate steps to protect themselves.

According to recent media reports, Warwick University was hacked last year, but they reportedly kept the breach secret from staff and students. It’s understood that poor cybersecurity has been blamed and that more than one incident has taken place. Instead of informing people, the University allegedly kept knowledge of the breaches hidden until the findings of an internal report were revealed.

When debit or credit card details are exposed in a data breach

Compensation where a letter is sent to the wrong address