{
  "$type": "site.standard.document",
  "bskyPostRef": {
    "cid": "bafyreiabvcdveuo2tpukvkdcioqi5ckxzjfc4yteondaan2pwmg3y7h56u",
    "uri": "at://did:plc:oznbnvgr7dmvddiyvr7dih52/app.bsky.feed.post/3mjowkxnkvrs2"
  },
  "coverImage": {
    "$type": "blob",
    "ref": {
      "$link": "bafkreif6nm23yljasyjvytbml4iuz66b2bkkfozhjrgw4axjaxbgbayk7a"
    },
    "mimeType": "image/jpeg",
    "size": 54411
  },
  "path": "/lifestyle/cars/arnold-clark-legal-action-uk-car-dealer-data-breach",
  "publishedAt": "2026-04-17T12:05:44.000Z",
  "site": "https://www.gbnews.com",
  "tags": [
    "Labour updates EV forecasts for 2030 as petrol and diesel drivers dominate 'longer than expected'",
    "Motorhome and campervan bans spark major backlash as 'knee-jerk' rules impact tourism",
    "Uninsured driving cases surge as police seize thousands of vehicles and issue £300 fines",
    "The GB News Editorial Charter"
  ],
  "textContent": "\n\n\nDrivers have been handed a major lifeline after a ruling approved a compensation claim in Scotland against car dealer Arnold Clark following a large cyber-attack and data breach.\n\nThe cyber-attack occurred in December 2022, leading to the theft of customer information, which later appeared on the dark web. Customers were told in early 2023 their personal data may have been accessed after the company discovered the breach.\n\n###\n\n\n\n\nArnold Clark said at the time it had been forced to shut down its entire computer network on Christmas Eve after identifying the attack. It was later confirmed hackers had extracted customer data, with roughly 15,000 drivers impacted.\n\nThe information taken included copies of passports and driving licences, as well as names, dates of birth, addresses, vehicle details, contact information and National Insurance numbers.\n\n###\n\n\n\n\nTRENDING\n\nStories\n\nVideos\n\nYour Say\n\n###\n\n\n\n\nLawyers for affected customers said the breach has caused serious concern about identity theft and financial fraud. One legal firm said the stolen data included material that could allow criminals to open fraudulent bank accounts.\n\nThe legal case was brought as a group action by drivers in Scotland, who are now seeking compensation for distress and potential losses caused by the breach.\n\nThis week, a judge at the Court of Session, Scotland's highest civil court, ruled the Scottish case can proceed, in a welcome move for the impacted drivers.\n\nBut Arnold Clark tried to stop the Scottish proceedings, arguing the case should not be heard in Scotland because similar legal action is already underway in England.\n\n###\n\n\n\n\n###\n\n\n\n\n###\n\n\n\n\nIts lawyers said all claims should be handled in one place, the High Court in England, to avoid duplication, extra cost, and the risk of inconsistent judgments.\n\nHowever, the judge rejected that argument. In his ruling, Lord Sandison said there was no meaningful link between the dispute and England, adding it had \"no connection whatsoever with England\".\n\nHe also found the vast majority of claimants were based in Scotland and had contracts with a company registered in Scotland, governed by Scottish law.\n\nThe court said the key question was which forum was most appropriate to hear the case. The judge said the correct approach was to identify the place with \"the most real and substantial connection\" to the dispute.\n\n### LATEST DEVELOPMENTS\n\n\n\n\n  * Labour updates EV forecasts for 2030 as petrol and diesel drivers dominate 'longer than expected'\n  * Motorhome and campervan bans spark major backlash as 'knee-jerk' rules impact tourism\n  * Uninsured driving cases surge as police seize thousands of vehicles and issue £300 fines\n\n\n\n###\n\n\n\n\n###\n\n\n\n\n###\n\n\n\n\nOn that basis, he concluded Scotland was the correct forum. Arnold Clark argued the English court was already dealing with a similar case involving cyberattack victims and Scottish claimants should join that process.\n\nThe company said it would be more efficient for all claimants to proceed together in England. It also argued running two separate group actions would lead to duplicated work, higher legal costs and the possibility of conflicting outcomes.\n\nIts legal team told the court Scottish drivers could simply join the English case, which was already underway.\n\nBut the court said the argument was not strong enough to override Scotland's connection to the case.\n\n###\n\n\n\n\n###\n\n\n\n\n###\n\n\n\n\nHe also said the existence of English proceedings did not automatically make England the correct forum for the\n\nThe court will later consider the substance of the case, including whether Arnold Clark failed to protect customer data and whether compensation should be awarded.\n\nArnold Clark may still raise further legal arguments later in the process, but the Scottish proceedings will continue for now.\n\n###\n\n\n\n\n**Our Standards: The GB News Editorial Charter**",
  "title": "Thousands of drivers given green light to take legal action against UK car dealer due to major data breach"
}