We’ve been contacted by people concerned about a possible data breach at Lantern after an email — apparently from the company — was posted online. We’ve also been contacted by at least one person who says they received the same email directly.
At this stage, the details shared in that email have not been officially confirmed, and we cannot independently verify that the message is genuine.
As far as we can tell, Lantern has not yet published a public statement about the incident, and there is currently no update on the Information Commissioner’s Office (ICO) website. Until Lantern releases formal confirmation, all information circulating online should be treated as unverified.
Below, we set out what the shared email claims, what this could mean, and the steps you can take if you have received the letter directly or are worried your data may be involved.
What does the unverified email say?
According to the email posted online — and the version reported directly to us by an individual who received it — the message claims that:
- Lantern experienced an IT security incident in April 2025.
- A third party gained temporary unauthorised access to part of its network.
- Some data may have been copied from its systems.
- The incident was reported to the ICO, FCA and law enforcement.
- Affected customers may have had personal and financial information exposed.
The unverified message includes things such as names, contact details, dates of birth and certain financial data.
If accurate, this would represent a significant breach involving sensitive personal and financial data. The posted email states that Lantern is offering 12 months of free Experian Identity Plus to affected customers.
If you have received a similar message directly from Lantern, you should:
- Check that the email addresses and links are legitimate.
- Contact Lantern through its official website or phone number to check whether the notification is genuine.
- Avoid clicking any links until you have verified the sender.
Even without official confirmation, it’s sensible to take basic precautions if you think your data could have been involved.
Could compensation become available?
If a confirmed data breach is later acknowledged by Lantern and the ICO, affected individuals may have grounds to seek compensation for distress and any losses suffered.
Join the Claim will keep monitoring developments and will update you as the situation develops.
