In 2023, 2plan Wealth Management experienced a significant cyberattack. The LockBit ransomware group is said to be behind the hack, which was discovered on August 10, 2023. The breach potentially exposed sensitive client information. According to one law firm, this has put victims of the hack at risk of identity theft and other cybercrimes​.

What happened in the 2plan data breach?

2plan Wealth Management offers independent financial advice, investment, retirement, and financial planning services. In May 2023, a cyberattack affected parts of the company’s IT system. On discovering the breach, 2plan informed the Financial Conduct Authority (FCA), the Information Commissioner’s Office (ICO), its advisors, and some clients. However, it took until March 2024 before 2plan notified additional clients that their data might also have been compromised​.

Your privacy and security are on the line

The stolen data includes highly sensitive information. The nature of the compromised data means scammers could impersonate victims or approach them with phishing attacks or other convincing cons.

To keep safe, victims of the 2plan data breach should:

• Monitor their financial activity. Check their bank accounts and credit card statements for unauthorised transactions. If they spot anything suspicious, notify their bank or credit card provider immediately.
• Check their credit score. Regularly monitor their credit score for unexpected changes. Consider registering with credit reference agencies to prevent credit from being taken out in their name. 2plan has offered affected clients a free two-year subscription to Experian’s web monitoring service. This can help alert victims to any misuse of their data.
• Be cautious of communications. Be wary of unsolicited emails or phone calls, even if they appear to come from familiar sources. Do not provide personal or financial information unless they are sure of the sender’s identity.
• Strengthen their online security. Update their passwords and use multi-factor authentication where possible. Be cautious of links and attachments in emails from unknown sources.
• Report suspected fraud. If they encounter any fraudulent activity, they should report it to Action Fraud

Don’t let this violation go unpunished!

Victims of the 2plan data breach may be entitled to compensation for any distress or financial losses experienced. Legal experts are investigating the incident, and there may be an opportunity to join a no-win, no-fee group action claim.

Try our easy-to-use eligibility checker to find out if you could join a potential compensation claim!