If you were employed by Boots on or before June 2023, your data might have been compromised.
Register your interest to stay informed and receive updates if this claim is taken forward by one of our partner law firms.
Join the Claim isn’t a law firm. We connect you with regulated UK firms that run group action claims. If one of our partner firms takes this case forward, we’ll share more details, including how to check your eligibility.
Join the Claim Limited is a claims management company. This claim is not regulated by the Financial Conduct Authority. Join the Claim Limited is authorised and regulated by the FCA (FRN: 1053404) for regulated claims management activities only.
Register your interest
Overview
In June 2023, a cyber-attack affected businesses around the world.
Hackers targeted Zellis, a payroll provider used by Boots, by exploiting a flaw in a widely used file transfer tool called MOVEit.
As a result of the hack, personal PAYE details belonging to current and former Boots staff were exposed.
The compromised data included employee:
Lawyers are now bringing compensation claims on behalf of affected Boots employees.
Could you qualify for a NO-WIN, NO-FEE Boots data breach compensation claim? Find out instantly with our easy-to-use checker.
Boots data breach – At a glance
Status
Stay Informed
Take a moment to answer a few simple questions so we can understand your connection and keep you updated.
Share your details so we can keep you informed if any updates become available.
If a partner law firm takes this claim forward, we’ll let you know the next steps and how to join.
Zellis, a third-party payroll provider used by Boots experienced a data breach when hackers exploited a vulnerability in a popular file transfer tool called MOVEit. As a result, the personal information of many Boots employees may have been accessed by hackers. This includes names, dates of birth, National Insurance numbers, and bank details.
The breach could have exposed sensitive information like your name, contact details, date of birth, employee number and National Insurance number.
Yes. Even if no money was taken, the breach may still have caused stress, anxiety, or concern about your privacy. Your personal data should have been safeguarded — and when it isn’t, that’s a serious issue.
A group action claim allows people affected by the same issue to take action together. This strength in numbers helps stand up to big organisations. Join the Claim helps connect people with law firms so these actions have real impact.
At Join the Claim, we bring consumers and law firms together to ensure these group actions are as powerful as possible.
June 2023
Zellis, the payroll provider used by Boots, confirms it has been compromised by the cyberattack. Shortly after the breach, Boots begins contacting employees whose data may have been compromised. This includes current and former staff. The company confirms that personal and payroll data was affected.
Cybersecurity experts link the attack to the Russian ransomware group Clop (also known as C10p), which had exploited the MOVEit vulnerability across multiple global organisations.
May 2023
Hackers exploited a vulnerability in the MOVEit file transfer app. Progress Software, which owns the app, admitted the data hack.
We’ll provide more updates on the Boots employee data breach as they occur.
If you were employed by Boots on or before June 2023, your data might have been compromised.
Register to stay updated and we’ll let you know if a partner law firm takes this claim forward.
We connect consumers with their legal dream teams to ensure they get the compensation and support they deserve.
Join the Claim is not a law firm. We connect individuals with top law firms for group action claims, and our service is free to use. While we may receive a fee from the law firms we introduce you to, this will not affect your costs or compensation. We are not responsible for the advice or services provided by these firms. Please note, nothing on this website is legal advice, and while we check claim eligibility, we cannot guarantee a law firm will accept a case.
Join the Claim is a trading name of Join the Claim Limited, authorised and regulated by the Financial Conduct Authority (FRN: 1053404). Registered in England and Wales, Company No: 16245278. Registered office: 32 Eyre Street, Sheffield, S1 4QZ.
© Join the Claim All Rights Reserved |