A recent data beach could have exposed resident, customer, and service user data across three London councils. Has your information been compromised?
Join the Claim isn’t a law firm. We connect you with regulated UK firms that run group action claims. If one of our partner firms takes this case forward, we’ll share more details, including how to check your eligibility.
Register your interest
Overview
Three London boroughs — Kensington & Chelsea, Westminster, and Hammersmith & Fulham — are dealing with a serious cyber incident that has disrupted essential services and may have exposed sensitive resident data. Together, the three councils serve around half a million residents.
The attack targeted shared IT systems used by the councils, causing widespread outages across phone lines, online portals and internal networks.
Kensington & Chelsea has confirmed that some historical data on its systems appears to have been copied, while Westminster and Hammersmith & Fulham have stated that investigations are ongoing and that data exposure cannot yet be ruled out.
If it’s confirmed that these Councils failed to adequately protect personal data, those affected could be entitled to compensation. Councils have emphasised that affected individuals will be contacted directly once investigations confirm whose data is involved.
We are monitoring the situation closely. Register your interest today and we will keep you updated if one of our regulated UK partner law firms is able to take this claim forward.
London Council data breach – At a glance
Why register with Join the Claim?
Join the Claim is bringing people together — uniting those who want answers, accountability and stronger data protections from the public bodies they trust.
Staying informed is the first step towards change. By registering alongside others affected, you’re showing that people expect better. And that when something goes wrong, they want to see it put right.
What do we know about the London Council data breach?
How Join the Claim works
Take a moment to answer a few simple questions so we can understand your connection and keep you updated.
Share your details so we can keep you informed if any updates become available.
If a partner law firm takes this claim forward, we’ll let you know the next steps and how to join.
Latest updates on the London Council data breach
December 2025
Councils begin to confirm the wider impact of the attack. Kensington & Chelsea states that some historical data on its systems appears to have been copied and taken away. Westminster and Hammersmith & Fulham warn that full restoration of digital services may take several weeks, with major online systems still offline. Investigations intensify, involving the NCA, NCSC and the ICO.
November 2025
The cyber-attack is reported publicly as service disruption becomes obvious across the three boroughs. Residents begin to experience delays with housing services, payments, and customer support. Councils publish early updates confirming significant outages across shared IT systems.
We’ll provide more updates on the data breach as they occur.
Are you affected by the London Council data breach?
The local authorities are contacting everyone affected by this data breach to let them know. Register to stay updated and we’ll let you know if a partner law firm takes this claim forward.
Frequently asked questions about the London Council data breach
At this stage, Kensington & Chelsea has stated some data was copied from its systems, and all three councils are investigating. If your information is found to be affected, you will be contacted directly.
This has not yet been confirmed. It may include historical records, service-user information, or data linked to council transactions.
Some systems are expected to take weeks to fully restore. Essential services are being prioritised.
If the investigation confirms a data breach affecting personal data, affected individuals may be entitled to take legal action for compensation. We will update this page as soon as more is known.
Councils have said they will contact residents directly once they know which data was impacted.
We are not a law firm. Our role is to keep people informed about potential group actions if one of our regulated UK partner law firms is able to take this claim forward.
By registering, you’ll stay up to date with any developments — from investigations to possible legal action.
No. Registering simply means you’ll receive updates. If a law firm later takes on the case, you’ll be given the option to learn more about the process and any potential costs before deciding whether to take part.
A group action claim allows people affected by the same issue to take action together. This strength in numbers helps stand up to big organisations. Join the Claim helps connect people with law firms so these actions have a real impact.
You might also like
We connect consumers with their legal dream teams to ensure they get the compensation and support they deserve.
Join the Claim is not a law firm. We connect individuals with top law firms for group action claims, and our service is free to use. While we may receive a fee from the law firms we introduce you to, this will not affect your costs or compensation. We are not responsible for the advice or services provided by these firms. Please note, nothing on this website is legal advice, and while we check claim eligibility, we cannot guarantee a law firm will accept a case.
Join the Claim is a registered trading name of Big on Media ltd. Big on Media is registered in the United Kingdom under licence number 09878028 with its registered office located at Big on Media, 32 Eyre Street, Sheffield, England, S1 4QZ
© Join the Claim All Rights Reserved |
