In June 2021, cyber-attackers targeted LSH Auto UK, a leading car dealership group. This breach compromised the sensitive personal information of current and former employees, leaving many vulnerable to fraud and identity theft. Shockingly, LSH Auto did not inform those affected until December 2021 – six months after the breach occurred.
What information was exposed in the LSH Auto data breach?
Hackers gained access to a range of sensitive employment-related information, including:
- Names
- Addresses
- Dates of birth
- National Insurance numbers
- Bank account details.
The delay in notifying employees meant their personal data was left exposed, giving cybercriminals time to misuse it.
What have lawyers said about the cyberattack?
Speaking to Infosecurity Magazine, Christine Sabino, a legal director at leading data breach law firm Hayes Connor said the initial letter to employees caused huge concern. She said:
“Being told out of the blue that your data has been breached is worrying enough, but all of those affected still don’t know which data was accessed and what might have happened to it.
“Whether they still work for this dealership or not, every single one of our clients has a right to know exactly what went wrong here.
“LSH owes each and every person affected an explanation for this unnecessary distress.’
Why take action?
- Emotional distress caused by the loss of your privacy
- Financial losses or increased risk of fraud
Join the Claim connects consumers with SRA-regulated lawyers. Visit the claim page to check your eligibility if a claim is open with one of our trusted legal partners. If a group action has not yet been launched, you can register your interest and we’ll keep you informed if a partner firm decides to take a claim forward.
