In a serious data security lapse, Liverpool University Hospital Foundation Trust (LUHFT) exposed the sensitive personal information of 14,000 staff members. This breach has raised concerns about data protection standards and the potential risks for affected individuals.
What happened in the LUHFT data breach?
In February 2023, LUHFT confirmed that an email sent to managers mistakenly contained a hidden file exposing employee data. This file included highly sensitive details such as:
- Full names
- Home addresses
- National Insurance numbers
- Salaries
- Dates of birth
- Gender and ethnicity
This type of information, if accessed by the wrong people, could lead to identity theft, fraud, or targeted phishing scams.
How did LUHFT respond?
Upon realising the mistake, LUHFT took action to delete the file from its systems. However, the breach had already occurred, leaving staff members vulnerable. The Trust has since:
- Launched an independent external review to investigate the breach.
- Reported the incident to the Information Commissioner’s Office (ICO).
- Apologised to staff and is providing support and guidance.
Am I at risk?
If your personal data was exposed in this breach, you could face an increased risk of fraud and identity theft. In March 2023, the Liverpool Echo reported that a Freedom of Information request revealed that it is unknown who saw the breached data.
Even if you have not suffered direct financial loss, the emotional distress and anxiety caused by the exposure of your personal information could make you eligible for compensation.
Join the Claim connects consumers with SRA-regulated lawyers. Visit the claim page to check your eligibility if a claim is open with one of our trusted legal partners. If a group action has not yet been launched, you can register your interest and we’ll keep you informed if a partner firm decides to take a claim forward.
