Manchester United sued for data breach following disclosure of employee pay information

Manchester United is currently facing legal action owing to a data breach that occurred in 2018.

The breach involved accidentally transmitting a file containing personal information, including names, addresses, earnings details, and national insurance numbers, of 167 employees to a casual catering and hospitality staff group.  The affected employees are now seeking compensation and are claiming an average of £3,000 each.

After the incident, Manchester United took steps to prevent similar breaches in the future and promptly reported the breach to the Information Commissioner’s Office (ICO).  However, the ICO took no further action against the football club.

This case serves as a reminder for employers to be aware of their obligations under data protection laws and to take appropriate measures to safeguard sensitive employee information.

Source: Manchester United in court action after HR data breach,, 15 March 2024