Arnold Clark suffered a huge data breach at the end of 2022, which affected thousands of customers’ data. If you have been the victim of the Arnold Clark data breach, you could be entitled to claim compensation. Thousands of people affected have already signed up to group class action claims in what may become one of the largest group action lawsuits seen in the UK.
In this article, we are going to explain what to do if you have been affected by the Arnold Clark data breach and how you can claim compensation. Read on to find out more, or visit our Arnold Clark data breach page to start your claim with us today.
What caused the Arnold Clark data breach?
In a letter to customers, Arnold Clark confirmed that they had suffered a cyber-attack on 23 December 2022. They said this involved personal data which was stored on their network. They have said hackers were responsible for the attack and that they accessed the car dealer’s systems. These cybercriminals then demanded Arnold Clark pay a multi-million-pound ransom to stop them from uploading the customer information onto the dark web. The Play ransomware cartel has claimed responsibility for this attack.
It is believed that failures to adopt effective security measures may have made this attack easier. Under General Data Protection Regulations (GDPR) and the Data Protection Act 2018, companies and organisations that hold your personal data legally must store it safely and protect it effectively against attack and third-party access. Failure to do so can result in a fine for the company and means people affected have the right to claim compensation.
Has my data been affected in the Arnold Clark data breach?
Arnold Clark initially claimed that customer data was safe. However, on 22 January 2023, it was reported that this was not the case after a 15GB tranche of data was found to have been leaked onto the dark web. A few weeks later, a following 30GB of data was uploaded, and then at the end of March, all of the data stolen, totalling almost 475GB, was posted on the dark web.
The data affected reportedly included, amongst other things:
- Customer photo identification
- Passport data
- Banking data
- Dates of birth
- Home addresses
- Vehicle details
- National insurance numbers
Tens of thousands of Arnold Clark customers are thought to be at risk. If you were a customer of Arnold Clark, your data could have been affected.
How do I know if my data was stolen in the Arnold Clark cyber-attack?
Arnold Clark wrote a statement to customers confirming the attack. If your details are at risk, Arnold Clark should have written to you to let you know. Arnold Clark has sent emails to customers confirming their involvement in the cyber-attack. However, this didn’t start to happen until late January 2023, despite the attack occurring a month earlier, on 23 December 2023. This delay could have put customers at further risk of cyberattacks, fraud or identity theft.
If you have received an email from Arnold Clark saying your data was involved in the breach, it is important you retain a copy. Some people have reported receiving an email for it to later disappear, but this is vital evidence if you decide to make a claim.
If you have not yet received an email confirming your involvement, we suggest checking your junk email to see if it has gone there, otherwise, contact Arnold Clark directly at customerservice@arnoldclark.com to get more information.
Arnold Clark has nearly 200 dealerships across Scotland and England, and it has not yet said how many customers have been contacted or confirmed how many have been affected by this breach.
In a statement on the 16th of February 2023, Arnold Clark said they have “taken the decision to proactively contact customers who may have been affected to make them aware of the cyber incident and to offer them guidance and protection in conjunction with our partners Experian.”
Many people whose data has been affected have reported that they’ve faced increased amounts of fraud, including phishing scams, people attempting identity fraud, cloned debit cards and having several credit checks run against them. We suggest taking the assistance offered, and below we have detailed what you can do to protect yourself after the Arnold Clark data breach.
If you have received an email from Arnold Clark saying your data was involved in the breach, it is important you retain a copy. Some people have reported receiving an email for it to later disappear, but this is vital evidence if you decide to make a claim.
If you have not yet received an email confirming your involvement, we suggest checking your junk email to see if it has gone there, otherwise, contact Arnold Clark directly at customerservice@arnoldclark.com to get more information.
Arnold Clark has nearly 200 dealerships across Scotland and England, and it has not yet said how many customers have been contacted or confirmed how many have been affected by this breach.
In a statement on the 16th of February 2023, Arnold Clark said they have “taken the decision to proactively contact customers who may have been affected to make them aware of the cyber incident and to offer them guidance and protection in conjunction with our partners Experian.”
Many people whose data has been affected have reported that they’ve faced increased amounts of fraud, including phishing scams, people attempting identity fraud, cloned debit cards and having several credit checks run against them. We suggest taking the assistance offered, and below we have detailed what you can do to protect yourself after the Arnold Clark data breach.
Following a data breach, you should be extra vigilant. If you receive unexpected communications, be wary, especially if they claim to be from Arnold Clark. Often after suffering a data breach, people receive an increased amount of phishing scams, which are designed to get further information, which could end in even more serious consequences.
What to do if you think you have been affected by the Arnold Clark data breach
There are some things you can do to minimise your risk after being the victim of a data breach that could protect you against the risk of fraud. These include:
- Changing your passwords for the company where your data was breached and if you use the same password for anything else.
- Contact your bank and/or credit card company immediately, if you think your financial details have been exposed, to let them know.
- Contact the Information Commissioner’s Office (ICO) to report the breach and make a complaint about the company or organisation’s handling of your data.
- Remain alert for scam emails and phone calls, and be wary of any unsolicited emails or calls asking for personal details, even if they appear to be from a reputable source.
- Keep an eye on your credit score in case any fraudsters try to take out credit in your name.
- Consult data breach solicitors who will be able to advise you if you’re eligible to claim compensation and assist you in doing so.
Can I claim compensation for the Arnold Clark data breach?
If your data has been breached as a result of the Arnold Clark data breach, you could be entitled to claim compensation. Under GDPR, you have the right to claim compensation if a company does not adhere to data protection rules. You can claim damages caused as a result of the breach, e.g. loss of funds due to fraud and emotional distress caused by the stress of having your data stolen and exposed and the subsequent consequences of this.
At HNK Solicitors, we have a team of expert data breach solicitors who are already advising Arnold Clark customers on their rights and helping them make a claim for compensation. We will likely take a group action claim against Arnold Clark. This is where a group of people affected by the same issue all come together to make a claim against a company. This usually shows the severity of the breach and helps to support each individual’s claim.
Get in touch with HNK Solicitors to start your Arnold Clark data breach claim
Any business or organisation that stores your personal data is legally required to keep it secure and stored safely. This includes putting appropriate measures in place to protect it against cyber-attacks and access from third parties. If a business fails to put these measures in place, resulting in your data being breached, you could have the right to claim compensation.
At HNK Solicitors, we have a team of dedicated data breach protection solicitors who can advise you on what steps to take after you have suffered a data breach and let you know if you’re eligible to make a claim. We have helped thousands of clients successfully obtain compensation after their data has been breached. We have a detailed understanding of the laws and regulations around data breaches, so we can provide expert advice and will ensure you get every penny you’re entitled to.
We can even take on your claim on a no-win, no-fee basis, which means you won’t have to pay anything upfront to get your claim started, and you only pay a small percentage once your compensation has been awarded. To find out more about making an Arnold Clark Data Breach Claim, visit our page. To start your claim today, you can simply fill in our online claim form, or get in touch with the team on 0151 668 0812 or enquiries@hnksolicitors.com to arrange your free consultation.
