- Home
- About Us
- Our Services
- Our Team
- Recruitment
- News
- Contact Us
On 22nd March 2021, the design and engineering firm Arup informed some of its current and former employees that its third-party payroll provider had suffered a cybersecurity breach. The breach resulted in a range of sensitive information being exposed. This included bank details and National Insurance numbers.
The cyberattack took place on 12th January 2021. However, the payroll provider, Symatrix Ltd, has not announced which of its customers were affected. At present, only Arup have publicly acknowledged the breach.
If you are or have been an employee of Arup, your data may have been exposed by the breach. Further, if you work for a company that has also used Symatrix for its payroll services, you may also be affected. If so, you could be entitled to compensation. Here at HNK Solicitors, we have helped a wide range of clients seek compensation for data breaches. Our experienced team can help you reach the outcome you deserve.
Arup was notified about the data breach on 11th March 2021. In a statement, Symatrix confirmed that their internal network had been targeted in a cyberattack in January. Their subsequent investigation revealed that a “small number” of their customers were affected. These customers have been notified directly. However, they have not been named publicly.
Subsequently, Arup notified the Information Commissioner’s Office (ICO) of the incident. The ICO’s investigation concluded that no regulatory action would be taken against Arup. However, the ICO’s investigation into Symatrix is ongoing.
Step 1
Get in touch using our contact forms or any details provided throughout the site.
Step 2
We arrange a free consultation with you to discuss the case
Step 3
If accepted we will action your case on a no win no fee basis.
If you have worked for Arup and are affected by the breach, you should have been notified by them directly. If you were paid by Arup during the above periods and have not been contacted, you may still have been affected. To be certain, you should get in touch with Arup as soon as possible.
Unfortunately, Symatrix has not specified which of their other customers were affected. However, as they have notified these customers directly, you should have been notified in turn if your data was exposed. If your company uses Symatrix and you have not been contacted, it may be worth checking with your employer.
If you are concerned you may have been affected, it is vital that you take steps to keep yourself safe. You should keep an eye on your bank account and immediately report any unusual transactions. Also, you should be wary of any emails or phone calls you receive. This is especially true if they seem to be from organisations such as your bank. Stolen data can be used to impersonate a trusted organisation and thereby gather even more information from you.
These sophisticated “phishing” attacks can be extremely convincing. That’s why extra care is necessary. If you have any concerns about an email or a phone call, go directly to the website of the organisation in question. You can use the contact details there to check that any communication is legitimate.
When contacting those affected, Arup indicated that the following data had been compromised.
Firstly, for anyone paid between 1st November 2018 and 1st February 2020:
Secondly, for anyone paid between 1st February 2020 and 31st January 2021:
In either case, the specific nature of the data exposed could lead to major consequences. Cybercriminals are adept at using personal data to engage in identity theft, for instance. Such theft can lead to financial losses. It can also result in criminal activity being conducted in your name.
But even the simple fact of your private data being made available to others can lead to distress and anxiety. This is why it is so important that companies handling or storing personal data take steps to ensure the data is safeguarded. If they fail to do so, they should be held to account.
If your data has been exposed through the Symatrix/Arup data breach, you could be entitled to compensation. This is especially so because the data stolen was extensive and highly sensitive. As a result, the potential consequences are more severe.
However, it is not the case that you must have suffered financial losses as a result of the breach in order to claim. The UK’s data protection regulations stress that you can claim compensation for any distress or inconvenience caused by a breach.
The process of starting a claim is simple. At HNK Solicitors, we offer free consultations to discuss the specifics of your case and advise you on whether you can claim. If we do think you have a valid claim, we can offer to take it up on a no-win, no-fee basis.
Data breaches are significant events with potentially long-lasting and painful consequences. If you have been affected by one, it’s important that you get all the help you need to move on. This includes compensation. Contact HNK Solicitors to discuss your case. Use the contact form on our website or call us on 0151 668 0814.
