Electoral Roll data breach
40 million voters were hacked in a huge data breach.
Find out if you can claim compensation for this privacy failure.
No-win, no-fee
Overview
In 2021, hackers accessed the details of UK voters – including millions of those not on public electoral registers. It total, around 40 million people had their data breached. The cybercriminals were able to hack the Electoral Commission as it had failed to implement basic security measures.
The information stolen in the hack included names, addresses, and other voter data. According to data protection lawyers “While no sensitive voting information was affected, the risk of identity theft and fraud remains high.”
In 2023, the commission – which oversees UK elections – admitted hackers had copies of electoral registers with the names and addresses of anyone registered to vote in the UK between 2014 and 2022. Lawyers have launched a group action lawsuit to help affected voters get compensation for the data protection failure. If eligible, join the claim to get the justice and compensation you deserve.
Electoral Roll – At a glance
What do we know about the Electoral Roll data breach claim?
Who is eligible to join the Electoral Roll data breach claim?
If you answer yes to the following, you could have a NO-WIN, NO- FEE Electoral Roll data breach compensation claim.
If you have a claim, and you want to join the Electoral Roll data breach group action, register your interest and we’ll connect you with a regulated UK law firm.
How to Join the Claim
Answer a few quick questions to see if you qualify to join the claim.
If eligible, provide a few extra details to uncover the regulated law firm ready to take on your case.
Join the Claim Ready to proceed? We’ll help you register with the law firm. They’ll manage your claim and keep you updated – all on a no-win, no-fee basis.
Frequently asked questions
Hackers broke into the Electoral Comissions Microsoft Exchange Server by taking advantage of known security flaws. According to the ICO, “If the Electoral Commission had taken basic steps to protect its systems, such as effective security patching and password management, it is highly likely that this data breach would not have happened. By not installing the latest security updates promptly, its systems were left exposed and vulnerable to hackers.”
No. Sensitive voter information was not breached.
The stolen data puts millions of UK voters at risk of fraud and identity theft. As such, you must be vigilant.
If you are aged between 20 to 28 and you registered to vote between 2014 and 2022 by submitting information through an online form, you could be eligible. Our simple checker provides instant clarity. Answer a few straightforward questions, and you’ll know if you could qualify to join the claim.
We won’t charge you a single penny. And we ensure any law firms we connect you with operate on a no-win-no-fee basis. If you win your case, you might have to pay a success fee. This will likely be deducted from your compensation. You will be fully informed about all fees before joining the claim.
In the UK, if a group of people have experienced loss, or otherwise been harmed by an organisation’s law breaking, they can come together to fight for justice. Levelling the playing field when standing up to big businesses, group actions prove that there is strength in numbers. At Join the Claim, we bring consumers and law firms together to ensure these group actions are as powerful as possible.
Latest updates on the Electoral Roll data breach
July 2024
The ICO reprimanded the Electoral Commission for failing to keep its security updated.
August 2023
The Electoral Commission apologised for the security breach. It also admitted that the hackers had copies of electoral registers with the names and addresses of anyone registered to vote in the UK between 2014 and 2022.
October 2022
The Electoral Commission discovered the breach and stopped the hackers access.
October 2021
The attackers gained access to personal information held on the Electoral Register. The servers were accessed multiple times without the Electoral Commission’s knowledge.
August 2021
Hackers were able to access the Electoral Commission’s Microsoft Exchange Server. The cybercriminals did this by impersonating a user account and exploiting known software vulnerabilities that had not been secured.
April and May 2021
Security patches for the vulnerabilities exploited in the cyber-attack were released. The Electoral Commission did not implement them.
We’ll provide more updates on the Electoral Commission data breach claim as they occur.
Join the Electoral Roll Claim
Find out if you could join a no-win, no-fee Electoral Roll data breach claim.
It will only take a few minutes and there’s no obligation to proceed.
Latest Electoral Roll data breach news
We connect consumers with their legal dream teams to ensure they get the compensation and support they deserve.
Join the Claim is not a law firm. We connect individuals with top law firms for group action claims, and our service is free to use. While we may receive a fee from the law firms we introduce you to, this will not affect your costs or compensation. We are not responsible for the advice or services provided by these firms. Please note, nothing on this website is legal advice, and while we check claim eligibility, we cannot guarantee a law firm will accept a case.
Join the claim is a registered trading name of Big on Media ltd. Big on Media is registered in the United Kingdom under licence number 09878028 with its registered office located at Big on Media, 6 Sunderland Street, Tickhill, Doncaster, DN11 9QJ
© Join the Claim All Rights Reserved | 2025