, , ,

Hold EasyJet to account, even if you haven’t lost any money

At Hayes Connor Solicitors, we have received hundreds of enquiries from people who have had their right to data privacy destroyed in the EasyJet data breach. In some cases, victims of this breach believe that they are not entitled to compensation. Usually because they have read reports like this one in the media.

But, while this reporter states that: “Generally, victims of a cyber-attack are only entitled to be reimbursed for any financial losses they suffer as a result of their card being compromised”, this is not true.

The theft and/or use of your personal data without your consent can cause distress, embarrassment and violation.  And you have a legal right to hold the guilty party to account.

Here’s what you need to know about claiming for emotional distress and breach of privacy caused by the EasyJet data hack.

Claiming for emotional distress following the EasyJet data breach

A personal data breach is a 21st-century version of being burgled. If a criminal came into your home and stole your private information, you would be distressed. So it’s understandable that people feel upset at having their personal online data taken. Especially if EasyJet effectively gave the thief the keys.

And the effects can be very real. For some people, a data breach can cause a lack of sleep, feeling ill, unsettled or confused. Stress can also affect your friends, your family and your job. We’ve seen cases where experiencing a data breach has resulted in adverse life events such as having to move to a new house or area, losing a job, relationship stress and separation, and dislocation from friends and family. All of which can lead to a diagnosable psychological injury.

What’s more, living with the threat of “what if” after a data breach can develop/ exacerbate mental health conditions. Victims of the EasyJet all now face living with heightened concern about their personal data being used for online scams, fraud and phishing attempts. And, at a time when the coronavirus pandemic is already having an impact on mental health, this additional worry is proving devastating for some.

So, while some people might believe that claiming for emotional distress is an over-reaction, this is not true. Thankfully, over the last few years, people are waking up to the reality of mental health and there is a greater awareness about the lasting effects of psychological suffering and anguish.

Claiming for breach of privacy following the EasyJet data breach

As data breaches continue to rise, we must hold organisations to account for their violations of trust when it comes to your valuable information. Indeed, while cybercriminals often target organisations to steal their data, in most cases the hackers are only successful because nobody put a “lock on the door”.

But just because EasyJet didn’t prioritise data security doesn’t mean you shouldn’t.

Data breach and cybercrime claims are not frivolous. As we have discussed, the emotional impact can be devastating, even without losing any money. But even if a privacy violation doesn’t cause you damage or distress, that doesn’t mean you shouldn’t do anything about it. Your data has value and organisations are legally obliged to look after it.

Something has to be done to make companies accountable for their data protection failures. And, in many cases, taking action against these organisations is the only way to make them improve their security processes.

As such, if EasyJet failed to protect your personal data, you have a right to claim compensation. Even if you haven’t suffered as a result.

Has EasyJet failed to look after your data?

At Hayes Connor, we are now registering victims of this breach to a no-win, no-fee group litigation action against the airline. Group actions can be a powerful tool and can have a bigger impact than a single claim.


To become part of our EasyJet group action, we need you to register with us. This guarantees that you will form part of the compensation claims that will be lodged by us. We will also keep you updated about developments in this case as they happen.

There are no costs to register and no obligation to proceed.