Could You Be Affected by the LUHFT Data Breach?

Thousands of staff had their personal details leaked. Were you affected? 

Join the Claim isn’t a law firm. We connect you with regulated UK firms that run group action claims. If one of our partner firms takes this case forward, we’ll share more details, including how to check your eligibility.
Join the Claim Limited is a claims management company. This claim is not regulated by the Financial Conduct Authority. Join the Claim Limited is authorised and regulated by the FCA (FRN: 1053404) for regulated claims management activities only.

Quick & Simple

Register your interest

Stay Informed

Get justice

Overview

In December 2022, Liverpool University Hospital Foundation Trust (LUHFT) inadvertently leaked the personal details of thousands of its staff.

The breach occurred when a file containing sensitive information was shared with managers within the organisation and 24 external email accounts. 275 managers are confirmed to have opened the document.

The file contained a hidden tab with the personal information. Data including names, addresses, National Insurance numbers and salaries was exposed in the breach.

Lawyers are investigating legal action against LUHFT on behalf of a large number of employees affected by the data security violation.

We are monitoring the situation closely. Register your interest, and we’ll keep you updated if one of our regulated UK partner law firms is able to take this claim forward.

LUHFT – At a glance  

Status

Stay Informed

What do we know about the LUHFT data breach?

  • Trust chief executive James Sumner apologised for the error. He confirmed the data exposed included names, addresses, DOBs, NI numbers, gender, ethnicity, and salary details.
  • Staff were notified of the LUHFT data breach by email in February 2023. If you received this email, you may have a data breach compensation claim.
  • LUHFT cannot fire or take disciplinary action against employees who make a data breach claim. It would be breaking the law if it did.

How Join the Claim works​

Quick survey

Take a moment to answer a few simple questions so we can understand your connection and keep you updated.

Register interest

Share your details so we can keep you informed if any updates become available.

Join a claim

If a partner law firm takes this claim forward, we’ll let you know the next steps and how to join.

Updates on the LUHFT data breach compensation

  • February 2025

    Join the Claim begins raising awareness of this data breach. 

  • March 2023

    The Information Commissioner Office (ICO) said it would take no further action against the hospital trust, despite the personal information of thousands of staff being emailed to hundreds of people. Also in March 2023, the Liverpool Echo reported that a Freedom of Information request revealed that it is unknown who saw the breached data.

  • February 2023

    LUHFT staff were informed via email about the data breach. The Trust's Chief Executive, James Sumner, issued letters to those impacted, detailing the nature of the breach and the steps being taken in response.

  • December 2022

    A file was sent by email to more than 450 managers at the Liverpool University Hospital Foundation Trust which included the personal information of thousands of staff members.

We’ll provide more updates on this case as they occur. 

Join the claim
Join the claim
Join the claim

Are you affected by the Liverpool University Hospital Foundation Trust Data Breach?

Register to stay updated, and we’ll let you know if a partner law firm takes this claim forward.

LUHFT data breach FAQs

In December 2022, Liverpool University Hospital Foundation Trust accidentally shared a file containing the personal information of approximately 14,000 staff members. This file, hidden within an email tab sent to managers, included sensitive data such as names, addresses, National Insurance numbers, dates of birth, and salary details. The breach exposed employees’ information to unauthorised access within the organisation.

Upon discovering the mistake, an independent external review was commissioned to investigate the incident and recommend measures to prevent similar breaches in the future. The Trust reported the breach to the Information Commissioner’s Office (ICO) and implemented their recommendations. LUHFT also issued an apology to affected staff.

By registering, you’ll stay up to date with any developments — from investigations to possible legal action.  

We are not a law firm. Our role is to keep people informed about potential group actions if one of our regulated UK partner law firms is able to take this claim forward.  

No. Registering simply means you’ll receive updates. If a law firm later takes on the case, you’ll be given the option to learn more about the process and any potential costs before deciding whether to take part. 

A group action claim allows people affected by the same issue to take action together. This strength in numbers helps stand up to big organisations. Join the Claim helps connect people with law firms so these actions have a real impact. 

Rated Excellent


on REVIEWS.io

Rated Excellent on REVIEWS.io

Join the claim
Clifford
Very easy to sign up, hope its sorted soon
Susan
Very easy and quick to complete the claim Everything was explained well and fees payable in etc were made very clear
Peter
So easy to sign up for the claim

Latest LUHFT data breach news

In a serious data security lapse, Liverpool University Hospital Foundation Trust (LUHFT) exposed the sensitive...
A shocking data breach at Liverpool University Hospital Foundation Trust (LUHFT) has compromised the personal...
Liverpool University Hospital Foundation Trust (LUHFT) mistakenly shared sensitive employee data, exposing personal details of...