450,000 Lloyds Banking Group customers affected by banking app breach

27/03/2026 | The Times

Lloyds Banking Group (LBG) has issued compensation following the recent personal data breach on 12 March that exposed other customers' financial transactions via a banking app. A total of 447,936 Lloyds, Halifax, and Bank of Scotland customers were affected after an overnight software update contained a glitch. LBG confirmed that 114,182 individuals clicked on these transactions, potentially accessing sensitive information such as account details, national insurance numbers, and payment references.

The breach also involved the exposure of data belonging to individuals who were not customers of the banking group. In a letter to the Treasury Select Committee, LBG's head of consumer relations apologised for the incident. So far, £139,000 has been paid to 3,625 customers for distress and inconvenience, though no financial losses have been identified to date.

The Chair of the Treasury Committee noted that while mobile banking offers convenience, the incident highlights the risks associated with relying on technology that remains susceptible to unpredictable errors. The bank continues to monitor the situation as it addresses the impact of the data exposure across its digital platforms.

£ - This article requires a subscription.

A version of this article is available without subscription in The Herald.


Training Announcement: Freevacy offers a range of independent data protection qualifications from IAPP and BCS. Our certified courses are available at foundation and practitioner levels and cover multiple legal jurisdictions, data protection operations management, and the implementation of complex privacy solutions in technical environments. Find out more.

Read Full Story
Lloyds banking group

What is this page?

You are reading a summary article on the Privacy Newsfeed, a free resource for DPOs and other professionals with privacy or data protection responsibilities helping them stay informed of industry news all in one place. The information here is a brief snippet relating to a single piece of original content or several articles about a common topic or thread. The main contributor is listed in the top left-hand corner, just beneath the article title.

The Privacy Newsfeed monitors over 300 global publications, of which more than 6,250 summary articles have been posted to the online archive dating back to the beginning of 2020. A weekly roundup is available by email every Friday.