English National Ballet data breach compensation claim

In August 2026, English National Ballet revealed that customer contact information had been leaked following a supply chain attack on its new customer relations provider, Beacon CRM.

English National Ballet said it found out about the incident when it was in the process of changing its customer relations service, with Beacon CRM informing the ballet that its systems had been compromised.

English National Ballet contacted affected customers directly by email to notify them of the incident. The organisation said it was “so sorry” for the “concerning” incident and confirmed it was taking the matter seriously. Beacon CRM said it acted promptly to secure its systems and notified the relevant authorities.

A Beacon spokesperson said the company was taking the incident “very seriously” and that its focus was on supporting affected customers. Beacon confirmed it had not experienced any service interruption as a result of the incident, and English National Ballet confirmed there had been no disruption to its website.

What are your rights?

English National Ballet and its third-party provider Beacon CRM had a legal obligation to protect your personal data. Unauthorised access to a supplier’s systems resulting in the exposure of customer contact information represents a failure of that obligation. Affected individuals have the right to seek compensation, including where no financial loss has occurred.

Distress, anxiety and loss of control over your personal data are all recognised as grounds for a claim under UK data protection law. You do not need to have suffered financial loss to register your interest.

Want to know your rights after a data breach? Read our complete consumer guide covering compensation, groups claims, what counts as harm, what to expect and how to protect yourself.

What data breach compensation could you receive?

There is no fixed amount. Each case is assessed on its own merits. Factors that are likely to be relevant include:

Type of data exposed. The incident involved personal details, email addresses, business phone numbers and business addresses. While no passwords or payment details were accessed, contact information can still be used by criminals to craft targeted phishing attempts or impersonation scams.
Distress and anxiety. Concern about how your contact details may be used and loss of trust in an organisation you had a relationship with are recognised forms of non-material harm that can support a compensation claim.
Risk of phishing and unsolicited contact. English National Ballet itself warned customers to remain cautious of unexpected emails and to verify the sender before clicking any links. This ongoing risk is relevant to a claim.
Financial loss. If you have experienced any suspicious activity or financial loss that can be linked to the incident, this would strengthen a claim further.

Get updates about this data breach and potential claims

What happens when you register?

Updates about the English National Ballet data breach. Including major developments, compensation claims or important next steps.

Alerts about other data breaches and consumer claims. Including new group claims and other relevant consumer action.

Our free monthly newsletter. With practical updates on consumer rights, compensation claims and access to justice.

Frequently asked questions

In August 2026, English National Ballet discovered that customer contact information had been leaked after its new customer relations provider, Beacon CRM, experienced a cybersecurity incident involving unauthorised access to its systems. English National Ballet found out about the incident when it was in the process of changing its customer relations service.

The data potentially affected includes personal information, email addresses, business phone numbers and business addresses. English National Ballet has confirmed that no passwords or payment information were accessed in the incident.

Beacon CRM informed English National Ballet that it acted promptly to secure its systems and notified the relevant authorities following the incident.

Yes. English National Ballet has confirmed there has been no disruption to its website and that customers can continue to use its online services as normal.

English National Ballet has directed those with questions about the incident to email [email protected].

No. Distress, worry and loss of control over your personal information are all recognised as harm under UK data protection law. You do not need to have suffered a financial loss to register your interest in a claim.

Are you affected?

Register for updates about this data breach and potential claims.

English National Ballet contacted those whose data was involved directly by email. If you received a notification from English National Ballet, your contact information was among the data potentially affected.

You may have been affected by the English National Ballet data breach if you:

Received an email from English National Ballet notifying you that your data may have been involved
Are, or have been, a customer of English National Ballet and provided contact details including your email address, business phone number or business address
Have purchased tickets or engaged with English National Ballet’s services and provided personal contact information when doing so

You do not need to have received a direct notification to be eligible. The full scale of this breach has not been confirmed.

Share this…

Data breach claims you can join

Legal Aid Agency data breach

If you applied for legal aid between 2007 and 2025, you could be eligible for a group claim. Register your interest to find out.
Capita data breach

Capita was fined £14m after a 2023 cyber attack exposed millions of people’s data. Register for updates on the ongoing legal action.
Facebook data misuse

Facebook faces a £2.1bn legal claim that alleges it exploited 46m UK users by unfairly profiting from their data. Sign up to stay updated.

Take a look at our Group claims page to see all of our current claims.

Data breaches we’re tracking

Manchester Airports Group data breach

On the weekend of 23 August 2026, criminal hackers gained the personal data of approximately 8.7m customers across 3 major UK airports.
South Staffordshire Water data breach compensation

In 2022, hackers accessed South Staffordshire Water’s systems after an undetected breach, publishing the personal and financial data of 633,887 UK customers and employees.
Southern Water data breach

On 22 January 2024, Southern Water discovered a cybercriminal claim that data had been stolen from its IT systems. On 12 February 2024, it confirmed that data from a limited part of its servers had been compromised following an illegal intrusion.
23andMe data breach

Between April and September 2023, a hacker accessed 23andMe using login credentials stolen from previous unrelated data breaches, exposing the personal information of 155,592 UK residents.
NHS Synnovis data breach

In June 2024, criminal hackers stole patient data from Synnovis, a pathology provider serving several NHS hospitals & GP surgeries across south east London.
ManoMano data breach

In January 2026, a hacker stole personal data from ManoMano, claiming approximately 37.8 million accounts across Europe were affected.
Co-op Member data breach

In April 2026, Booking.com confirmed that unauthorised third parties had accessed guests’ personal booking information.
CarGurus data breach

In February 2026, CarGurus, the online marketplace used by millions of people to research and buy cars, had its customer data stolen.
Booking.com data breach

In April 2026, Booking.com confirmed that unauthorised third parties had accessed guests’ personal booking information.
Lloyds Banking Group breach

Lloyds, Halifax and Bank of Scotland customers may have had sensitive financial data exposed in the March 2026 breach. Learn your rights.
M&S data breach

M&S data breach. In April 2025, Marks & Spencer experienced a cyber attack that caused widespread disruption across its digital operations.