15,000 Drivers Sue Arnold Clark Over Data Breach

Severity: High (Score: 66.0)

Sources: Glasgowtimes, www.bbc.co.uk, Bbc, www.sundaypost.com, Dailymail

Summary

A judge has allowed approximately 15,000 motorists to pursue a class action lawsuit against Arnold Clark following a significant data breach that exposed personal information on the dark web. The breach occurred after a cyber attack on the company's IT systems in December 2022, leading to sensitive data, including names, dates of birth, and financial information, being compromised. Customers have expressed concerns that Arnold Clark did not adequately protect their data. The Court of Session in Scotland ruled that the case should be heard in Scotland, as over 95% of the affected individuals reside there and have a contractual relationship governed by Scots law. Arnold Clark's legal team had argued for the case to be consolidated with a similar action in England, but this was rejected by the court. Legal firms have reported a rising number of inquiries from affected customers, indicating that the situation may worsen. The dealership has stated it is taking steps to mitigate the impact of the breach on its customers. Key Points: • 15,000 motorists are pursuing a class action lawsuit against Arnold Clark. • The data breach occurred due to a cyber attack in December 2022. • Sensitive personal information has been compromised and surfaced on the dark web.

Key Entities

• Data Breach (attack_type)
• Arnold Clark (company)
• England (country)
• Scotland (country)
• CWE-200 - Exposure of Sensitive Information (cwe)
• T1567 - Exfiltration Over Web Service (mitre_attack)