Transform Data Breach
A data security incident at Transform Hospital Group means that 900 gigabytes of patient information has been stolen by hackers. Transform is a specialist weight loss and cosmetic surgery group, offering treatments such as breast augmentation, rhinoplasty and liposuction; as well as gender affirming surgery for transgender and non-binary patients, and intimate treatments such as labiaplasty. The personal data includes photographs, information about operation enquiries, names & addresses, medical history, ethnicity and religion. Due to the sensitive nature of the information compromised, we believe that patients may be entitled to compensation exceeding £10K.
How do I know if my data has been breached by Transform Hospital Group?
Transform Hospital Group has send various email communications to their customer list, advising them of the nature of the breach, the type of data stolen and with updates around best practice. Check that all details for your direct debits are up to date, and delete any that are no longer needed. The group claims to have already taken a number of steps in response to the incident. This includes increasing security against further attacks, reviewing IT systems and identifying measures to be put in place, notifying the relevant authorities and appointing a specialist IT security and forensic expert to investigate the incident. Patient advise includes checking bank accounts regularly, being suspicious if asked to confirm personal details by email or text, enabling a two-factor authentication on all online services and using different passwords for different online accounts.
Who are we?
Fletchers Data Claims is a legal service provided by Fletchers Solicitors, a Top 100 UK Law Firm with over 30 years experience of fighting for consumer rights. If you have been the victim of a data breach then you may be entitled to claim for compensation for any losses or damage caused, as well as the distress that the incident has caused. The Fletchers Data Claims service is there to represent your interests and help you claim back the compensation you are entitled to either through an individual claim against the organisation that breached your data or in some cases, through representing you and others are part of a large group action (often called a ‘class action’).
How do I claim?
If your data was part of the Transform data breach then you may be entitled to compensation for the distress caused by the breach. Even if you are lucky and the breach did not result in any specific loss or damage, you are still rightly entitled by law to claim compensation for the distress caused by the incident. It is important that businesses treat your data lawfully and with care and respect, and are held to account when they fail to do so.
The nature of this data is incredibly sensitive. Patients and prospective patients of Transform are at risk of having very personal information being made known to the public. Approaching a specialist, even to enquire about cosmetic treatments, must be very daunting. It is likely that patients may already be experiencing a lack of confidence or low self-esteem in their day to day lives, and to have these insecurities exposed to the public is very worrying.
We are aware that Transform offers gender affirming surgery for transgender and non-binary patients, alongside other personal treatments such as labiaplasty. As well as names and addresses of patients, the leaked data also includes information around operation enquiries – which we believe would cause a great deal of emotional distress. The inclusion of patient images amongst the data that has been leaked, only adds to this trauma.
Depending on the information that has been released and the exact circumstances of the individual affected, the consequences of this breach could be significant and the damages a Court awards would reflect this. It is not unrealistic to think that some awards could exceed £10k.
All advice provided is free of charge and if we take your case on, we always work on a no win-no fee basis. That means if your claim following a data breach is not successful, you will not be charged a penny.