Investigation after data breach affects thousands

Chloe ParkmanChannel Islands
News imageDominic Lipinski/PA Wire Close-up of a laptop computer keyboard, with woman's hands typing on a MacBook. Two hands are typing on the QWERTY keyboard. Dominic Lipinski/PA Wire
About 3,000 Bailiwick residents have been affected by the data breach

An investigation has been launched after thousands of workers were affected by a personal data breach.

Data Protection authorities of Guernsey, Jersey, the Isle of Man and the UK have launched inquiries into the cyber incident which compromised data of the trade union Prospect Custodian Trustees Ltd in June 2025.

The Office of Data Protection (ODPA) said Prospect had more than 160,000 members who work as scientists, engineers, tech experts and in other specialist roles, and added about 3,000 Bailiwick residents were affected.

A Prospect spokesperson said it was "deeply sorry", adding "we have offered a package of support, including credit monitoring, to those who have been affected".

The organisation holds members' personal information including financial data and sensitive data such as trade union membership, ethnic origin, sexual orientation, disability, and religious belief, according to ODPA.

It said the investigation would examine the scope of personal information exposed and any potential harms.

Cyber attacks increasing

It will also look at whether Prospect had protective measures in place and whether it took appropriate steps in their initial response to the breach.

"We take our responsibilities to our members incredibly seriously," a Prospect spokesperson added.

"These kinds of incidents are sadly becoming more common, and we encourage members to utilise the support we have offered if they have not yet done so.

"We informed the Information Commissioner's Office about the incident in line with our obligations and have provided further information subsequently."

Paul Vane, Jersey information commissioner, said cyber and phishing attacks were "on the rise and are progressively targeting organisations and businesses which span multi-jurisdictionally".

Brent Homan, Guernsey Data Protection Commissioner, said "By joining forces with our partners in the UK and British Isles we will ensure an elevated level of protection for our collective citizens' data rights."

Follow BBC Guernsey on X and Facebook. Follow BBC Jersey on X and Facebook. Send your story ideas to [email protected].