15,000 Drivers Sue Arnold Clark Over Data Breach Exposing Personal Data

Severity: Medium (Score: 51.9)

Sources: News.Stv.Tv, Dailymail

Summary

A judge has permitted approximately 15,000 drivers to pursue a class action lawsuit against Arnold Clark, a Scottish car dealership, following a significant data breach. The breach, which occurred due to a cyber attack on the company's IT systems in December 2022, resulted in personal data being found on the dark web. Customers allege that Arnold Clark failed to adequately protect their information, prompting them to seek legal recourse. Lord Sandison of the Court of Session in Scotland ruled that the case should proceed in Scotland, as the majority of affected individuals reside there and the legal relationship was governed by Scots law. Solicitors have reported that over 5,000 individuals have already contacted them regarding the breach, indicating a growing concern among affected customers. The dealership has claimed to have taken steps to mitigate the impact of the breach, including setting up a call center for affected individuals. Key Points: • 15,000 drivers can pursue a class action lawsuit against Arnold Clark over a data breach. • The breach exposed personal data on the dark web after a cyber attack in December 2022. • Arnold Clark's legal team argued for the case to be heard in England, but the court ruled in favor of Scottish jurisdiction.

Key Entities

• Data Breach (attack_type)
• Arnold Clark (company)
• England (country)
• Scotland (country)
• CWE-200 - Exposure of Sensitive Information (cwe)
• T1567 - Exfiltration Over Web Service (mitre_attack)