Personal details exposed. Customers left in the dark. Here's what you need to know.
In January 2023, estate agency Chestertons was hit by a serious cyberattack. Hackers managed to get into the company’s systems and walk away with a significant haul of sensitive personal information.
The breach wasn’t made public straight away. In fact, by the time Chestertons had discovered what happened, the stolen data was already being shared online. That means cybercriminals may have had access to private customer details, including names, addresses, ID documents and even bank information, before anyone was made aware.
So how did the Chestertons estate agency hack happen?
The attack is believed to have taken place in late 2022, with some of the stolen data dated as far back as November. It wasn’t until 11 January 2023 that Chestertons confirmed the breach. Worrying, according to some data breach experts, many of those affected still haven’t received data breach notification letters.
If you’ve ever bought, sold, rented or enquired about a property with Chestertons, your data might have been affected. And if so, you could be entitled to compensation.
How serious was the Chestertons data breach?
What makes this breach particularly serious is the nature of the data that was stolen. We’re not just talking about email addresses. Reports suggest that passport information and bank details were accessed.
In the wrong hands, this kind of information is enough to apply for loans, open bank accounts, or trick people into handing over even more personal data. The fallout from a breach like this can last for years.
Who might be affected?
You don’t need to be a current Chestertons customer to be caught up in this breach. In fact, many people who interacted with the estate agent months, or even years, ago could be affected.
That includes:
- Current and former tenants and landlords
- People who bought or sold a property through Chestertons
- Anyone who arranged a viewing or made an enquiry
- Individuals who submitted ID documents or payment details for referencing.
If you shared your information with Chestertons at any point, it’s possible your data was stored and later compromised.
Think you might be affected by the Chestertons data breach?
Under UK data protection law, companies like Chestertons have a legal duty to keep your personal information safe. When they fail to do that, and your data ends up in the wrong hands, you have the right to seek compensation.
Join the Claim connects consumers with SRA-regulated lawyers. Visit the claim page to check your eligibility if a claim is open with one of our trusted legal partners. If a group action has not yet been launched, you can register your interest and we’ll keep you informed if a partner firm decides to take a claim forward.
