We are writing to inform you that we have recently been made aware of a potential data incident affecting our systems.

We are taking this matter seriously and want to share what we currently know, what we are still investigating, and what we are doing in response.

What we know so far

• The data involved appears to be testing data, not live or production records.
• Potential client names may be present within the data set.
• The total volume of data involved is estimated to be approximately 20 GB.
• Based on findings to date, no other personal information has been identified including no email addresses, postal addresses, or dates of birth.

What is still being reviewed

The exact timing of the event and the full extent of the data involved are still being reviewed.

Our investigation is ongoing, and we will update this notice as further information is confirmed.

What we have done

• Individuals who may have been affected have already been contacted directly.
• A full internal review is in progress to confirm the scope, timing, and root cause of the incident.
• We have consulted with the Information Commissioner Office (ICO).
• Based on the nature of the data involved, the outcome of that consultation is that the incident does not need to be reported.
• Relevant safeguards and access controls are being reassessed as part of the review.

Updates

Any further updates will be shared on this page as soon as they are available.

We appreciate your patience as we complete our review.