Guides › Banking Scams and Fraud › A Company Lost My Data (Data Breach)
A Company Lost My Data (Data Breach)
If a company tells you your data was in a breach, ask it what happened and what information was affected. Use strong passwords and multifactor authentication, and watch for suspicious calls, emails, texts and websites. If the company has not kept your information safe, you can complain to the ICO after giving it a chance to respond.
At a Glance
Your Rights
What the rules say, with a link to the official source for each.
What to Do
Steps
Complain to the organisation and ask it to explain what's happened and what information has been affected. Use strong passwords and multifactor authentication to protect your accounts. Watch out for suspicious phone calls, emails, texts and websites. You can complain to the ICO if an organisation hasn't kept your information safe; give the organisation a chance to respond first. source
Time Limits to Know
Miss a deadline and you can lose a right. Check the dates on your own paperwork.
- Straight awaySecure your accountsChange passwords and turn on multifactor authentication
Steps to Take
Step 1 of 5
Ask the company what data was involved.
Step 2 of 5
Change passwords, starting with email and banking.
Step 3 of 5
Watch for scams using your details.
Step 4 of 5
Check your bank statements and credit file.
Step 5 of 5
Complain to the company, then the ICO.
(Tap the numbers to reveal steps)
Where to Go If It Is Not Put Right
Your options, in order, and when each one applies.
The Company
Ask what happened and complain.
Information Commissioner's Office
If it has not kept your data safe.
Good to Know
Small things that make your complaint stronger.
Criminals often contact breach victims pretending to help: be wary.
Want Help?
If you would like one of our team to look at your problem, our initial case review is free. We cannot guarantee any outcome and we do not give legal advice.
Lead reviewer
Luke Marley
Founder and Lead Reviewer
Luke founded CPUK in 2026 after seeing how hard it is for ordinary people to get problems with companies put right. He oversees our guides and checks them against official sources.
Research by Katie Burt, Co-founder and Operations Lead (17 years in the care sector, including managing services for vulnerable adults), and the CPUK Research Team. Researched with AI-assisted research tools, then checked and corrected by our team.
Last checked: 13 October 2026. We are not paid by the companies we write about. Adverts never affect our guidance. Read our editorial policy.
Sources and official links
- ico.org.uk/for-the-public/i-m-worried-an-organisation-hasn-t-kept-my-information-safe-what-should-i-do/what-steps-can-i-take-if-i-ve-been-affected-by-a-personal-data-breach Checked 13 October 2026
- ico.org.uk Checked 8 October 2026