Thousands of Arnold Clark Customers Can Sue Over Major Data Breach
Thousands of drivers have been given the green light to take legal action against UK car dealership Arnold Clark following a major data breach. The company experienced a significant cyber-attack in 2022, which resulted in customer data being compromised and appearing online.
Court Ruling Allows Claims to Proceed
About 15,000 drivers have now been given the go-ahead to pursue compensation claims against Arnold Clark after the dark web data breach. The car dealership, headquartered in Glasgow, had argued that any legal action should be stopped because a similar case is already being pursued in England.
However, the Court of Session—Scotland's highest civil court—has ruled that because the vehicles were sold in Scotland, thousands of customers could proceed with their claim. In his ruling, Lord Sandison stated there was no meaningful link between the dispute and England, adding it had "no connection whatsoever with England."
Data Breach Details and Customer Concerns
Legal firm Thompsons previously told The Sunday Post newspaper that it had been approached by more than 5,000 people who received a letter from Arnold Clark advising them that their personal data had been compromised. Partner Patrick McGuire commented, "I think this is the tip of the iceberg. The most financially sensitive data has been posted on the dark web and certainly includes data that would allow criminals to steal people's identities and open fraudulent bank accounts."
He added, "Our clients are understandably very worried." The breach involved sensitive information that could enable identity theft and fraudulent activities, raising significant concerns among affected customers.
Company Response and Security Measures
Arnold Clark said it had taken several steps to protect partners and customers following the cyber-attack. The company told customers at the time, "Upon advice from our cyber security team, we understand that some personal data has been extracted by the hackers who carried out the cyber attack. We take the protection of your personal data extremely seriously, and we want to assure you we are doing everything we can to minimise any risk to you from this incident."
Despite these measures, the ruling allows affected customers to seek compensation, highlighting the ongoing legal and financial repercussions of the breach. The case underscores the importance of robust data protection in the automotive industry.
