In January 2023, Cambian Group, which is one of the largest children’s social care providers in the UK, discovered “unauthorised activity” on its computer systems.
Data stolen in this hack has since been found on the dark web, and months after the hack, this data is still currently for sale online (as of 26/04/2023).
Worryingly, Cambian is owned by CareTech, which operates a network of hospitals, schools, and homes for children and adults with learning disabilities, autism, and mental health conditions. As such, vulnerable individuals are at risk.
Initially, Cambian was unable to confirm what data had been compromised in the attack, although highly sensitive information has been found online. However, almost four months after the data security breach, By the Bridge Fostering – part of the Cambian Group – has now written to former foster parents with more information.
According to a Data Incident Notification sent to affected individuals, the stolen data includes:
Worryingly, Cambian admits that “it could transpire that further data of yours was affected”.
Cambian has warned the former foster parents not to search for their information on the dark web, as it could be infected with malware and accessing this data could put them at further risk of cybercrime.
Cambian has provided some basic information to help protect the safety and wellbeing of those affected by the data breach. This includes:
Victims of this breach can also contact Cambian to discuss their concerns at cyber.incident@caretech-uk.com
At KP Law, we have seen victims of similar data breaches become the target of cybercriminals, with instances of phishing, fraud, and identity theft. Some victims of this breach have already experienced fraudulent transactions and by failing to take sufficient steps to notify all those involved immediately, Cambian left them exposed as they were not given the opportunity to protect themselves. This adds to the victims’ worry now that they have found out about the breach.
KP Law has launched an investigation to find out how this data privacy breach was allowed to happen, and how the security incident affects those who use Cambian’s services.
If you are affected by the Cambian data breach, join our no-win, no-fee action and claim compensation for this data protection failure.
Because of the nature of this breach, and the sensitivities involved, we can represent you anonymously, and speak on your behalf.
In our regular update, we provide a roundup of some of the data breaches and… Read More
We have launched a group action against MOVEit/Zellis. Group actions can be a powerful tool… Read More
The number of organisations affected by the MoveIt Data Breach is still rising, despite the… Read More
We have launched a group action against 23andMe. Group actions can be a powerful tool… Read More
The Information Commissioner’s Office (ICO) has launched a joint investigation into the 23andMe data breach… Read More
We have launched a group action against Capita. Group actions can be a powerful tool… Read More