The PeopleCheck data breach could have serious consequences for anyone whose details were exposed. Here’s what’s at stake and what you can do to protect yourself.
If your data has been exposed in this breach, you should receive a notification email/letter.
Why is this breach so serious?
The hackers stole more than just names and email addresses. Reports confirm the stolen data includes:
- Full names and postal addresses
- Phone numbers and dates of birth
- Social Security numbers (assuming NI numbers in the UK)
- Login details, passwords, and even two-factor authentication tokens
- Invoice and payment details (relates mainly to employer transactions, not job applicants)
This combination of personal data creates a perfect storm for identity theft and fraud.
What are the risks?
- Identity theft – Criminals can use your personal information to apply for loans, credit cards, or benefits in your name.
- Phishing scams – You might receive more convincing scam emails or calls pretending to be from trusted organisations.
- Account takeovers – With login details and authentication tokens exposed, hackers can try to access your accounts.
- Financial fraud – Payment and invoice data could be misused, leading to unauthorised transactions (although this is likely to impact clients of PeopleCheck, rather than those who used the service when applying for a job.
What should you do now?
Even if you haven’t noticed anything unusual yet, the danger can last for years after a breach. Take these steps to protect yourself:
- Check your credit report regularly for unexpected activity.
- Change your passwords, especially if you’ve used the same ones on multiple accounts.
- Watch out for scams – avoid clicking on suspicious links or giving out personal details.
- Consider signing up for credit monitoring services if offered.
Could you be owed compensation?
Yes. UK data protection law gives you the right to claim if your personal data was compromised and the company failed to safeguard it.
Join the Claim connects consumers with SRA-regulated lawyers. Visit the claim page to check your eligibility if a claim is open with one of our trusted legal partners. If a group action has not yet been launched, you can register your interest and we’ll keep you informed if a partner firm decides to take a claim forward.
