This notice is to inform customers about a cyber security incident impacting Business Insurance Solutions Limited.

We take the security of our systems and the safeguarding of our data very seriously and worked closely with leading cyber security firms and the relevant authorities while we investigated this matter.

We have contacted affected customers directly where possible but this general notice is for the benefit of anyone that we may not have been able to contact. In all likelihood, if we have not contacted you it is because your personal data has not been affected.

What happened?

In January 2026, Business Insurance Solutions Limited experienced a computer security incident, in which an unauthorised third party accessed our systems and extracted some data from our servers.

What information was involved?

We have undertaken a detailed risk assessment of the data in scope of the incident. This identified that the following types of personal data had been extracted:

• Contact Information
• Motoring Offences
• Bank Account Number & Sort code
• Criminal convictions
• Medical History (where provided)
• Claims History
• Date of Birth

What have we done?

We have no information suggesting that any personal data has been misused. However, this incident may have placed customers at increased risk of identity theft or fraud.

Upon learning of the incident, we promptly took our systems offline while we secured containment of the incident and eradicated unauthorised access. We launched an investigation and engaged leading cyber specialists to assist in managing the incident and ensuring our systems were secure.

What else can I do?

We recommend that you:

• Closely monitor your accounts, financial statements and credit reports for any suspicious activity.
• Report any unknown transaction to the bank or service provider immediately.
• Be cautious of phishing attempts. Do not click on links or open attachments from unknown senders and be vigilant about emails, phone calls and text messages requesting personal information.
• Never send money to somebody you do not know, and be particularly cautious if someone is requesting money via email or text, or sends a link to an online payment form.
• Use unique and complex passwords and utilise two-factor authentication where possible.
• Check your credit report regularly for newly opened accounts or credit searches that you do not recognise.
• If you think you have been a victim of fraud, report it to Action Fraud, the UK’s national fraud and internet crime reporting centre, on 0300 123 2040.

The National Cyber Security Centre (NCSC) has helpful guidance for staying secure online: https://www.ncsc.gov.uk/collection/top-tips-for-staying-secure-online

For more information

We take our responsibilities to protect customer information incredibly seriously and are committed to taking appropriate next steps to continue to safeguard our environment, keep data secure and prevent future incidents.

If you have any queries, or require any further information regarding this incident or the services available to you, please call 0330 041 9514.