In an alarming example of how vulnerable personal data can be, in early 2024, Southern Water – one of the UK’s largest water utilities – confirmed a major cyberattack had exposed the personal data of thousands of customers and employees.
The breach, caused by a ransomware attack, has had long-lasting repercussions. Over a year later, Southern Water is still dealing with the fallout – including reputational damage and mounting legal claims.
If you’re a Southern Water customer or employee, your data may have been compromised, and you may be entitled to compensation.
What happened in the Southern Water data breach?
Southern Water fell victim to a ransomware attack by the infamous hacking group Black Basta. The criminals said they had accessed a vast amount of sensitive data.
The attackers initially claimed to have stolen data on over 750,000 individuals, although Southern Water has since stated that the breach affected around 5–10% of its customer base – a number now believed to be around 270,000.
Despite public assurances that systems were secured and services remained operational, Southern Water has since faced criticism for its slow response, limited transparency, and what many see as an attempt to downplay the seriousness of the breach.
Are you affected? If so, you could be due compensation. Watch our video to learn more.
Did Southern Water try to pay off the hackers?
According to reports, Black Basta listed the stolen data on a dark web leak site and demanded a ransom. One source claimed Southern Water offered the group $750,000 to prevent the leak. However, it is unclear whether this ransomware was ever paid.
Southern Water has refused to confirm details of any negotiations, citing ongoing investigations and advice from cybersecurity experts. Regardless of whether a ransom was paid, the personal data of thousands of individuals is now potentially in the hands of cybercriminals.
Southern Water has paid £4.5 million - but what about victims?
To date, Southern Water has paid £4.5 million to mitigate the effects of the ransomware attack. But affected customers and employees are believed to have received nothing – even as they deal with the risk of identity theft, fraud, and emotional distress. At Join the Claim, we believe that’s unacceptable.
Your data, your rights and your chance to claim
Under UK data protection laws, organisations like Southern Water have a legal duty to protect your personal information. When they fail, and your data ends up in the hands of criminals, you have a right to seek compensation.
This includes compensation for:
- Distress and anxiety caused by the breach
- Risk or actual misuse of your personal data
- Time and money spent dealing with the aftermath (e.g. monitoring your bank account, changing passwords, or repairing credit score damage).
If you’ve received confirmation – or even a letter of apology – from Southern Water regarding this data breach, you could be eligible to join a group claim and seek financial compensation.
Who was affected by Southern Water ransomware?
You may be affected and eligible to join the Southern Water data breach claim if:
- You are a current or former Southern Water customer or employee
- You received a notification from Southern Water confirming your data may have been affected
- You have suffered distress, inconvenience, or any loss or risk due to the breach.
You do not need to prove that your data has been misused. The fact that it was exposed is enough to start a claim.
Join the Southern Water compensation claim
Join the Claim is helping victims of the Southern Water data breach seek justice and secure compensation. We work with expert data breach solicitors who are investigating Southern Water’s failure and preparing a group legal action.
Our claims process is free to join and risk-free. You only pay if your claim is successful.
Answer a few straightforward questions, and you’ll know if you could qualify for a Southern Water data breach group action.
