Start your claim

ACRO Criminal Records Data Breach

If an organisation has failed to protect your data, whether due to a breach or the mishandling of your personal information, you are not alone. If your data has been misused or compromised, you may be entitled to compensation.

ACRO Criminal Records Data Breach

ACRO, the UK’s Criminal Records Office, manages criminal record data and carries out background checks for employers, government bodies and foreign embassies. This includes sharing information from the Police National Computer through an agreement with the Cabinet Office.

In early 2023, ACRO was forced to take its customer portal offline following a reported cyberattack. As of April, it is still unclear how many individuals have been affected or what specific data may have been accessed. The agency confirmed that it acted quickly to disable the portal and launched a full investigation.

In a message to users, ACRO stated that the incident affected its website between 17 January and 21 March 2023. Although no confirmed evidence of a data breach has been provided, ACRO acknowledged that personal data, including identification details and criminal record information, may have been compromised. As of 17 April, the website remained offline due to the ongoing investigation.

If your personal data was involved in the breach, you may be entitled to claim compensation. A data security incident of this nature can lead to financial loss, identity theft and emotional distress. Those affected have the right to seek compensation for the harm they have suffered.

Get the best legal team on your side

  • Over 1,000 years of combined legal expertise
  • Leading experts in data breach and group actions
  • We’ll get you more compensation than anyone else
  • We win the cases other firms can’t
  • Fully independent, and fully regulated.

What data was taken in the ACRO data breach?

In an email to users, ACRO confirmed that it had become aware of a cyber security incident affecting its website between 17 January and 21 March 2023. The message stated: “At this time, we have no conclusive evidence that personal data has been affected by the cyber security incident.” It continued: “We are very sorry that, because of your interaction with ACRO, your data could have been affected. We are working tirelessly to resolve this matter.”

ACRO also advised that there did not appear to be any risk to payment information, or to the details or certificates issued following an application. However, they acknowledged that the personal data potentially affected could include any information provided to the organisation, such as identification details and criminal conviction records. This may include:

  • Names
  • Address history
  • Extended family information
  • Passport details
  • New foreign address details
  • Photo and data PIN cautions
  • Criminal records

The email also mentioned that if the person had a nominated endorser, professional or other third party on their application, their name, relationship to the application, occupation, phone numbers, email addresses and case reference number could also have been affected.

Who is affected by the ACRO data breach?

If you received an email from ACRO regarding the cyber security incident, it is likely that your data may have been affected. Individuals contacted by ACRO included direct applicants, nominated endorsers supporting an application, and professionals handling applications on behalf of others.

At this stage, it remains unclear how many people have been impacted or what the full implications of the breach may be.

ACRO has advised users to remain vigilant, recommending the use of strong, unique passwords for online accounts and urging caution around suspicious activity such as phishing emails.

Can I claim compensation?

Under UK data protection laws, including the UK General Data Protection Regulation (GDPR), individuals have the right to seek compensation if their personal data has been mishandled or exposed in a breach. Compensation may cover harm such as damage to reputation, emotional distress or financial loss caused by the incident.

If you believe you have been affected by a data breach, it is important to get advice from a solicitor experienced in this area. At Express Solicitors, our team specialises in data protection claims and can guide you through the legal process.

What our clients say

See all reviews

How can Express Solicitors help with my data breach claim?

Express Solicitors has a team of specialist data breach solicitors who have years of experience working in the sector and fighting to seek compensation for those who have been the victim of a data breach. Our in-depth understanding of the relevant legal statutes and regulations ensures we can provide the best possible chance of you getting the compensation you deserve.

We offer free, no-obligation consultations to help you determine if you can pursue a claim. We also take on claims on a no-win, no-fee basis, so you don’t have to pay a penny upfront, and if your claim is unsuccessful, you don’t owe us anything.

If you would like to discuss a potential claim, get in touch with us today to find out more.

Step 1

Get in contact by using one of our contact forms throughout the site.

Step 2

We will assess your case based on the information you provide.

Step 3

If you have a valid claim, we will accept your case on a No Win No Fee basis.

Free Consultation

You can contact Express Solicitors for a free consultation with no obligation, where we will take the time to understand your claim and offer clear, helpful guidance on your next steps.

No-Win-No-Fee

We can assist you on a no win, no fee basis, so you will only need to pay us if your claim is successful and compensation is awarded.

Client Communication

If your case is accepted, our team of Data Protection Solicitors will handle the process on your behalf and keep you informed at every stage.

Our Group Actions team

The Express Group Actions team has years of experience supporting clients with data breach, data protection and cybercrime claims against large organisations. We have been part of the biggest group action settlement in England and Wales in respect of a data breach. We understand the harm and distress that can result when your personal information is not handled properly or has been compromised. We are committed to helping you secure the compensation you deserve.

Why choose Express Solicitors? 

No matter how tricky the case, we treat every claim with the utmost care and empathy. Our mission? To get you the justice you deserve.

With our no win, no fee arrangements, you can pursue your claim without stressing over upfront costs or legal fees.

We’re proud of our ‘Excellent’ rating on Trustpilot and our accreditation by the Solicitors Regulation Authority (SRA). It shows just how committed we are to professional integrity and making our clients happy.

So, why wait? Reach out today to kickstart your compensation claim and see how much you might be entitled to.

No Win No Fee, Free Consultation

Please fill out the form below to get started with your claim

Call us on 0161 904 4661

Lines are open now and our legal advisors are on standby to tell you if you can make a claim.

Call: 0161 904 4661

Start your claim online

Complete our simple form to receive a call back from our expert legal team.

Start your claim