According to reports, only 300 of the 270,000 potentially affected customers affected by the data breach in 2020 have come forward to claim refunds of up to £1,000 each. Those affected are entitled to receive financial compensation for the emotional and financial impact incurred.

What is the data breach?

In 2020, the energy company ‘People’s Energy’ suffered a major cyber attack which exposed its customer's sensitive information, including names, addresses, dates of birth, email addresses, phone numbers, account numbers, and tariff details. According to iNews, 15 small business customers were the only ones financial information accessed.

The breach was discovered on December 15, 2020, and was reported to the Information Commissioner’s Office (ICO), the energy regulator Ofgem, the National Centre for Cyber-Security, and the police.

People’s Energy was dissolved in 2021 but administrators were able to recover millions of pounds as part of the administration process – to compensate customers affected by the breach.

When is the claim deadline?

The publication reports that Richard Forrest, legal director at Hayes Connor, said:

“Joining the action claim is a smart way to pursue compensation without the usual stress or costs that often come with legal action. When you team up with other affected customers, your case becomes stronger, giving you a better chance of a successful outcome.

“If you join the claim, you’ll be supported by legal professionals who know the ins and outs of data breach cases. They’ll work hard to make sure your claim is handled efficiently, with the goal of getting you the best possible result. There’s really no downside to joining the claim.”

What happens next?

After a claim has been submitted, the administrators will consider the claim and make a decision on whether you are entitled to compensation. Solicitors should undertake the work involved, including inciting the distress suffered by the claimants, referencing the specific section of the GDPR which entitles them to damages.