Second Cyberattack Hits 118 118: How The Group Action Lawyers Can Help You Claim Compensation

Second cyberattack hits 118 118 Money: Some customers of 118 118 Money have received formal notifications confirming that on 26 October 2026 an unauthorised person reportedly gained access to customer information through a cyberattack.

The exposed data reportedly included names, contact details, dates of birth, addresses, details of income and expenditure, and bank account information (account name, number and sort code). This is the second significant security incident linked to the 118 118 group.

At The Group Action Lawyers,  we are preparing legal action so that affected individuals can seek compensation together in a cost-effective and efficient way.

Understanding the Impact When a Second Cyberattack Hits 118 118

The official notification reportedly states that the company reported the incident to the Information Commissioner’s Office, and is offering 12 months of free fraud-monitoring services. Whilst these steps are necessary, they do not cancel the right to claim compensation under the UK GDPR and the Data Protection Act 2018.

The inclusion of bank account details and income/expenditure information can create a higher risk profile than many other breaches. Affected customers may experience anxiety, the need for increased vigilance, and the practical burden of monitoring accounts and protecting themselves against potential misuse of their data.

Because this is the second cyberattack hits 118 118, questions arise about whether appropriate lessons were learned and whether security measures met the required standard. Group proceedings can allow these systemic issues to be examined once on behalf of all participants rather than in dozens of separate claims.

How a Group Action Works and What It Can Achieve

Group actions can allow many people who have suffered similar harm from the same event to combine their claims. This approach reduces individual costs, strengthens the collective evidence, and often encourages earlier settlement discussions. In data breach cases involving banking and financial details, compensation can reflect both the distress caused and the heightened risk of fraud or identity misuse.

Joining a group action can be straightforward. Individuals who received the notification can register their interest. The Group Action Lawyers can collect the necessary evidence, instruct independent experts where required, and manage communications with the defendant and its insurers.

Claims typically seek compensation for non-material damage (distress and loss of control over personal data) and any material losses that arise. In comparable banking-data breaches, awards have reached several thousand pounds per person, depending on individual circumstances.

Next Steps for Affected Customers

If you have received a notification about the October 2026 incident, keep a copy of the email and note any unusual activity on your bank accounts. Avoid responding to unexpected calls, texts or emails that claim to be from 118 118 Money, especially those asking for passwords or personal information. The company has confirmed it will never request a password and that any additional security checks will be clearly explained.

Registering early helps ensure your claim is included in the initial group and that evidence is preserved while details remain fresh. Compensation cannot undo the breach, but it can provide recognition of the harm caused and practical support for the steps needed to protect yourself going forward.

If you have been affected as the second cyberattack hits 118 118, contact The Group Action Lawyers today for a confidential discussion. We can explain how the group claim works, assess whether you are eligible to join, and guide you through every stage with the aim of securing fair compensation. Taking that first step places you in a stronger position to hold the organisation to account and recover what you may be entitled to.