In 2021, DivideBuy, a UK-based interest-free credit provider, announced a data breach that exposed sensitive personal information belonging to its customers. This breach raised serious concerns about data protection practices and the security of personal information. Now, legal claims are being brought forward to seek justice for those affected by the breach.
The DivideBuy data breach: What happened?
DivideBuy notified customers in spring 2021 that their personal information had been exposed in a cyber-attack. While the company did not disclose specific details about the breach’s cause or who was responsible, it admitted that a wide range of customer data was accessed, including:
- Names
- Dates of birth
- Home addresses
- Telephone numbers
- Email addresses
- Associated aliases
- Certain credit report information
Although no financial account data, such as bank details or credit card information, was compromised, the type of data exposed still leaves individuals vulnerable to fraud, identity theft, and phishing scams.
After discovering the breach, DivideBuy took steps to address the incident, including:
- Collaborating with cybersecurity experts to secure its systems and prevent future attacks.
- Notifying affected individuals and offering a 12-month subscription to TrueIdentity, a credit monitoring service that alerts users to suspicious activity on their TransUnion Credit Report.
However, questions rose about whether DivideBuy’s data protection measures were adequate before the breach occurred. Customers and legal experts have raised concerns about whether the company fulfilled its obligations under the UK General Data Protection Regulation (GDPR) to safeguard personal information.
The impact on affected DivideBuy customers
For many of those affected, the data breach has caused significant distress. The personal information exposed in the breach can be used by cybercriminals in various ways, including:
- Identity theft and financial fraud.
- Phishing scams that target individuals using their personal details.
- Cross-referencing with other breaches to build more comprehensive profiles of victims.
Many affected customers have reported anxiety over the misuse of their data, particularly given the increasing frequency of cyber-attacks and the long-term risks associated with stolen information.
Join the legal claim against DivideBuy
Under GDPR, organisations are required to implement robust security measures to protect customer data. If they fail to do so, and a breach occurs, affected individuals have the right to seek compensation for the damage caused. This includes compensation for:
- Emotional distress and anxiety resulting from the loss of privacy.
- Financial losses or increased costs of protecting against fraud.
Legal claims against DivideBuy are now underway, with affected customers seeking justice for the mishandling of their personal information. These claims aim to hold DivideBuy accountable for any failures in protecting customer data and to secure fair compensation for those impacted.
Joining a legal action can:
- Provide you with compensation for the emotional and financial impact of the breach.
- Hold DivideBuy accountable for its responsibilities under data protection laws.
- Raise awareness of the importance of robust data security to prevent future breaches.
Even if you haven’t suffered financial losses, you may still be eligible for compensation if you’ve experienced emotional distress or a loss of privacy due to the breach.
Act now to protect your rights
If you think DivideBuy breached your data, don’t wait to take action. Data breach claims are subject to time limits, so it’s essential to act quickly. Use Join the Claim to check your eligibility today and find out if you can join the legal action.
