A recent data breach could have exposed the information of LNER passengers. Has your data been compromised?
Join the Claim isn’t a law firm. We connect you with regulated UK firms that run group action claims. If one of our partner firms takes this case forward, we’ll share more details, including how to check your eligibility.
Join the Claim Limited is a claims management company. This claim is not regulated by the Financial Conduct Authority. Join the Claim Limited is authorised and regulated by the FCA (FRN: 1053404) for regulated claims management activities only.
Register your interest
Overview
LNER has confirmed that a cyber incident at one of its communications suppliers has compromised customer data.
Although no bank, payment card, or password information is believed to have been affected, LNER has urged customers to be alert.
Even without financial details, exposed contact data can be used in phishing scams, where criminals pose as legitimate companies to trick customers into revealing more sensitive information.
If it’s confirmed that LNER, or its supplier, failed to adequately protect customer data, those affected could be entitled to compensation under UK data protection law.
We are monitoring the situation closely. Register your interest today and we will keep you updated if one of our regulated UK partner law firms is able to take this claim forward.
LNER data breach – At a glance
Why register with Join the Claim?
Join the Claim is bringing people together — uniting those who want answers, accountability and stronger data protections from the companies they trust.
Staying informed is the first step towards change. By registering alongside others affected, you’re showing that people expect better. And that when something goes wrong, they want to see it put right.
What do we know about the LNER data breach?
How Join the Claim works
Take a moment to answer a few simple questions so we can understand your connection and keep you updated.
Share your details so we can keep you informed if any updates become available.
If a partner law firm takes this claim forward, we’ll let you know the next steps and how to join.
Latest updates on the LNER data breach
November 2025
Reports emerge linking the LNER breach to Dentsu.
October 2025
The Dentsu data breach is first reported by the press.
Septemberr 2025
The LNER breach took place on 8 September 2025. It involved unauthorised access to a supplier network that managed LNER’s customer communications. The company began contacting affected passengers directly.
We’ll provide more updates on the data breach as they occur.
Are you affected by the LNER data breach?
LNER is contacting all affected customers to let them know. Register to stay updated, and we’ll let you know if a partner law firm takes this claim forward.
Frequently asked questions about the LNER data breach
Yes. London North Eastern Railway (LNER) has confirmed that some customer details were exposed during a cybersecurity incident linked to one of its third-party suppliers.
According to LNER, the data accessed included customer names and email addresses. The firm says no passwords, bank details or payment card information were compromised, and ticketing systems remain secure.
At this stage, the breach itself occurred within the systems of Dentsu’s marketing division, Merkle — a third-party supplier used by several major UK companies, including LNER, to manage customer communications.
While LNER was not directly breached, it has confirmed that some customer data was accessed through the supplier’s compromised network.
Under UK data protection law, both the data controller (LNER) and the data processor (Dentsu/Merkle) share responsibility for protecting personal information.
If it’s confirmed that LNER or its supplier failed to protect customer data in line with UK data protection law, those affected could be eligible for compensation. Join the Claim will continue to monitor the situation and update affected individuals as more details emerge.
We are not a law firm. Our role is to keep people informed about potential group actions if one of our regulated UK partner law firms is able to take this claim forward.
By registering, you’ll stay up to date with any developments — from investigations to possible legal action.
No. Registering simply means you’ll receive updates. If a law firm later takes on the case, you’ll be given the option to learn more about the process and any potential costs before deciding whether to take part.
A group action claim allows people affected by the same issue to take action together. This strength in numbers helps stand up to big organisations. Join the Claim helps connect people with law firms so these actions have a real impact.
No. You are free to contact a solicitor directly at any time if you would like legal advice or wish to explore a claim.
When you register your interest with Join the Claim, we’ll keep you updated if one of our regulated partner law firms decides to take the claim forward. However, other law firms may also investigate or pursue claims independently of Join the Claim.
Registering for updates does not prevent you from speaking to another law firm or joining a claim elsewhere.
We connect consumers with their legal dream teams to ensure they get the compensation and support they deserve.
Join the Claim is not a law firm. We connect individuals with top law firms for group or individual claims, and our service is free to use. While we may receive a fee from the law firms we introduce you to, this will not affect your costs or compensation. We are not responsible for the advice or services provided by these firms. Please note, nothing on this website is legal advice, and while we check claim eligibility, we cannot guarantee a law firm will accept a case.
Join the Claim is a trading name of Join the Claim Limited, authorised and regulated by the Financial Conduct Authority (FRN: 1053404). Registered in England and Wales, Company No: 16245278. Registered office: 32 Eyre Street, Sheffield, S1 4QZ.
© Join the Claim All Rights Reserved |
