Are you affected by the BBC employee data breach? If so, you could be due justice and compensation.
No-win, no-fee
Expert help
Save time
Get compensation
Overview
In June 2023, a cyber-attack affected businesses around the world.
Hackers targeted Zellis, a payroll provider used by the BBC through IBM, by exploiting a flaw in a widely used file transfer tool called MOVEit. As a result, personal PAYE details belonging to BBC staff and contractors were exposed.
The compromised data included employee:
Lawyers are now bringing compensation claims on behalf of BBC employees and contractors whose personal data was exposed in the 2023 cyber-attack.
Could you qualify for a NO-WIN, NO-FEE BBC employee compensation claim? Find out instantly with our easy-to-use checker.
BBC data breach claim – At a glance
Deadline
Claim still open
You could get
Case by case basis
Cost to claim
£0 (no-win, no-fee)
Could you qualify for a NO-WIN, NO- FEE BBC staff data breach compensation claim? Find out instantly with our easy-to-use checker. If eligible, and you want to make a claim, register your interest, and we’ll notify you if we find a regulated law firm to handle your case.
Answer a few quick questions to see if you qualify to join the claim.
If you qualify, share a few more details and we’ll update you on the next steps.
We’ll notify you if we find a regulated law firm ready to accept your case – all on a no-win, no-fee basis.
In June 2023, the BBC told staff that a cyber-attack had hit Zellis — a payroll support provider used by the BBC through IBM. The attack exploited a vulnerability in a popular file transfer tool called MOVEit. As a result, sensitive personal data of staff paid via PAYE was accessed by hackers.
The data exposed includes:
BBC ID number
Title, first and last name
Date of birth
National Insurance number
Home address (line 1)
BBC email address
Start and end date of BBC employment or engagement
The breach affects current and former BBC employees, as well as individuals engaged by the BBC on a PAYE basis. If you’ve received a notification from the BBC about this incident, you may be eligible to claim compensation.
Find out instantly with our easy-to-use checker. If eligible, and you want to make a claim, register your interest, and we’ll notify you if we find a regulated law firm to handle your case.
Experts believe the Russian ransomware group ‘Clop’ was responsible. They’ve claimed to have stolen data from hundreds of organisations through MOVEit.
We cannot say how much compensation you might get if you win your data breach case. Each claim is based on its merits and your solicitor will work to get the compensation owed to you.
In the UK, if a group of people have experienced loss, or otherwise been harmed by an organisation’s law breaking, they can come together to fight for justice. Levelling the playing field when standing up to big businesses, group actions prove that there is strength in numbers. At Join the Claim, we bring consumers and law firms together to ensure these group actions are as powerful as possible.
We won’t charge you a single penny. And we ensure any law firms we connect you with operate on a no-win-no-fee basis. If you win, the law firm will either take its fees from your compensation payment or recover these from the defendants.
A no-win, no-fee agreement means you don’t pay your solicitor’s legal fees if your claim is unsuccessful. This makes it easier and more affordable to take part in group litigation. However, T&Cs apply.
Want the full picture, including what to check before signing? Read our complete guide to no win, no fee agreements here.
June 2023
The BBC is notified by Zellis that its systems have been breached due to the MOVEit vulnerability. IBM, which was working with Zellis to deliver payroll services to the BBC, is also involved. The BBC begins contacting affected employees and individuals engaged on a PAYE basis to inform them that their personal data may have been accessed.
Cybersecurity experts link the attack to the Russian ransomware group Clop (also known as C10p), which had exploited the MOVEit vulnerability across multiple global organisations.
May 2023
A vulnerability in MOVEit Transfer - a widely used file transfer software by Progress Software - is exploited by hackers. This software was being used by Zellis, a payroll provider to several organisations, including the BBC.
We’ll provide more updates on the BBC employee data breach as they occur.
Find out if you could join a no-win, no-fee BBC employee data breach claim.
It will only take a few minutes, and there’s no obligation to proceed.
We connect consumers with their legal dream teams to ensure they get the compensation and support they deserve.
Join the Claim is not a law firm. We connect individuals with top law firms for group action claims, and our service is free to use. While we may receive a fee from the law firms we introduce you to, this will not affect your costs or compensation. We are not responsible for the advice or services provided by these firms. Please note, nothing on this website is legal advice, and while we check claim eligibility, we cannot guarantee a law firm will accept a case.
Join the Claim is a registered trading name of Big on Media ltd. Big on Media is registered in the United Kingdom under licence number 09878028 with its registered office located at Big on Media, 6 Sunderland Street, Tickhill, Doncaster, DN11 9QJ
© Join the Claim All Rights Reserved | 2025
