According to the Information Commissioner’s Office (ICO), “your identity is one of your most valuable assets”. And, “If your identity is stolen, you can lose money and may find it difficult to get loans, credit cards or a mortgage”.
Cybercriminals are using all kinds of stolen data to build profiles that they can use for nefarious purposes, so the most valuable kind of information (other than financial data) is identity documentation.
When a data breach involves copies of passports, criminals often use this to assume the victim’s identity. They can then create fraudulent accounts, apply for loans or credit cards, and conduct other financial transactions in the victim’s name. Cybercriminals can also use stolen passport information to forge passports that are then used in money laundering, human trafficking, drug smuggling, and terrorist activities.
Stolen passports and other identity documentation poses a significant threat to both individuals and national security. So, organisations must make sure that this information is robustly protected. But, all too often, this is not happening.
KP Law is a group action law firm. With a group action claim, you and the other victims join together and fight to get compensation. Group actions can be a powerful tool and can have a bigger impact than a single claim.
If you are a victim of a data protection failure involving your identity documents, check out our current group actions to see if we are running a claim related to that specific breach.
If you are involved in a potential group action not listed below, please tell us about it! Where enough people come forward, we may launch a new claim.
We do not take on individual cases.
Cybercriminals are buying and selling a wide range of stolen identity data on the dark web. This includes:
If you are involved in a breach involving lost, stolen or otherwise compromised ID documents, you should report this to the issuing organisation ASAP. We also advise anyone who has had their ID compromised in a data breach to take immediate steps to protect themselves.
While each case is judged on its own merits, there are some things we would typically look for when it comes to when claiming compensation following a data breach, cybercrime or other GDPR violation:
With stolen data, cybercriminals can make purchases using your bank and credit cards, apply for credit in your name, set up fraudulent bank accounts and access your existing online accounts.
GDPR failures, cybercrime and data breaches can have a significant impact on you, both mentally and physically. They can cause or exacerbate anxiety, stress and other psychological conditions.
Your data has value, and organisations must be held to account if they fail to protect your right to data privacy or otherwise do not uphold your GDPR rights.
Don’t let the fear of costs stop you getting the justice you deserve. Contact us today and let us fight for you.
We use legal technology where it adds value. Our team deploys advanced tools to streamline complex processes, reduce costs and improve case strategy.
We explain your position in plain English. We’ll work with you side-by-side and keep you informed every step of the way.
We understand the pressures of running a business and tailor our advice to your commercial objectives and budget.
Our litigators have successfully resolved disputes in the High Court, County Court, and through alternative dispute resolution in high profile and high value cases.
From early case assessment to managing high-volume data in document-heavy disputes, we use a developed operations team and technology to make litigation more efficient, transparent and effective.
Our legal team have litigated in high profile cases in the UK and USA, securing results for tens of thousands of clients in the UK and abroad.
Over the past year, KP Law has continued to grow its team, develop its technology and strengthen its expertise as we continue to achieve the best possible outcomes for all our clients.
This success has been recognised in the 2027 edition of the Legal 500, with KP Law maintaining its Tier 1 ranking for Group Litigation.
The Legal 500’s commentary celebrates the firm’s work on complex, high-value group litigation and identifies the breadth of its practice, including product liability, data breach and equal pay claims. It also highlights the strong contribution of the wider team across the firm’s ongoing matters and recognises KP Law’s status as a leader in its field.
Three KP Law lawyers also receive individual recognition in the directory. Managing Partner Andrew Nugent Smith and Partner and Head of Product Liability Tom Longstaff are listed as Leading Individuals. Senior Associate Carter Young retains her status as a Leading Associate.
This development comes despite Harrods previously stating that it accepted vicarious liability for the ‘despicable sexual abuse’ suffered by hundreds of survivors.This latest disclosure, on the day of the second anniversary of the documentary that highlighted the scale of the abuse by Fayed and his team of enablers, follows the
Disclosure of the true value comes as Harrods reports that its much criticised Redress Scheme only paid a total of £4.1m in compensation to just over 50 survivors in the year up to January 2026 and has only set aside £51.8m for all future claims. KP Law, which is representing
CORLA was founded by a group of law firms that are deeply committed to improving access to justice for claimants by way of collective redress.
We are a founding member of CORLA, alongside Edwin Coe, Hausfeld, Leigh Day, Milberg London and PGMBM.
