Important Information About a Cybersecurity Incident

Important Information About a Cybersecurity Incident 

We want to inform you about a recent cybersecurity incident that may have affected some of our customers’ personal and dependants’ information where applicable . 

What Happened 

On or around 10 August 2025, we became aware of an incident involving unauthorised access to archived systems. At the time, law enforcement informed us that no personal data had been publicly released. 
However, we have since been notified by the relevant authorities that some data may now be accessible online. 

We believe the data may be related to digitised historic paperwork or correspondence scanned upon receipt at our Head Office. Data stored across our Case Management System, Office suites and other online platforms was not compromised or affected. 

We have found no evidence that data relating to the wider client base has been accessed, and we continue to monitor the situation closely. 

What Information Was Involved 

The types of personal information potentially affected may include: 

• Names 

• Email addresses and phone numbers 

• Address  

• Date of birth  

• Financial information

• National insurance numbers 

• Driving licences and passports 

• Health-related documentation 

At this time, we are not aware of any misuse of this information. 

What We Are Doing 

We have taken immediate action to secure our systems and protect customer data, including: 

• Securing our network and disabling legacy systems 

• Working with forensic experts and law enforcement 

• Notifying the Information Commissioner’s Office (ICO) 

• Continuing to monitor the situation 

What You Can Do 

If you believe your information may be affected, we recommend that you: 

• Remain alert for suspicious emails, phone calls, or messages 

• Do not provide personal information to unknown contacts 

• Change passwords if you reuse them across services 

• Monitor your financial and online accounts for unusual activity 

You may also wish to seek guidance from Action Fraud or the National Crime Agency. 

Contact Information 

If you have questions or believe you may be affected, please contact our Data Protection Officer at: 

• Email: [email protected]  

We apologise for any inconvenience and remain committed to the security of your personal information.