Cybersecurity Breach at Prospect Trade Union Impacts Thousands Across Channel Islands
A multi-jurisdictional investigation has been launched into a June data breach at Prospect Custodian Trustees Ltd, a trade union representing over 160,000 members, including scientists, engineers, and tech professionals. The incident, which exposed sensitive personal data—such as financial details, trade union membership records, ethnic origin, sexual orientation, disability, and religious beliefs—has prompted a joint probe by data protection authorities in Jersey, Guernsey, the Isle of Man, and the UK.
The investigation will assess the scope of the breach, the potential harm to affected individuals, and whether Prospect implemented adequate safeguards to protect the compromised data. Authorities will also review whether the union complied with statutory notification requirements and whether its response effectively mitigated risks after the leak was discovered.
Brent Homan, Guernsey’s Data Protection Commissioner, emphasized the need for cross-border collaboration, stating that international cyber threats require a unified response to uphold data rights. Paul Vane, Jersey’s Information Commissioner, noted the rising trend of multi-jurisdictional cyber and phishing attacks, underscoring the importance of coordinated enforcement to protect affected individuals.
The outcome of the investigation could set precedents for data protection standards and breach response protocols across the British Isles.
Source: https://www.bailiwickexpress.com/news/joint-investigation-launched-into-trade-union-data-breach/
Prospect union cybersecurity rating report: https://www.rankiteo.com/company/prospect_3
"id": "PRO1766066620",
"linkid": "prospect_3",
"type": "Breach",
"date": "6/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Thousands',
'industry': 'Labor Union',
'location': ['Jersey', 'Guernsey', 'Isle of Man', 'UK'],
'name': 'Prospect Custodian Trustees Ltd',
'size': '160,000 members',
'type': 'Trade Union'}],
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal information',
'Financial data',
'Trade union membership',
'Ethnic origin',
'Sexual orientation',
'Disability',
'Religious belief']},
'date_detected': '2024-06',
'description': 'An investigation has been launched into a data breach at a '
'trade union expected to have impacted thousands of members '
'across the Channel Islands. The breach compromised personal '
'information, including financial data and sensitive data such '
'as trade union membership, ethnic origin, sexual orientation, '
'disability, and religious belief.',
'impact': {'data_compromised': 'Personal information, financial data, trade '
'union membership, ethnic origin, sexual '
'orientation, disability, religious belief',
'identity_theft_risk': 'High',
'payment_information_risk': 'High'},
'investigation_status': 'Ongoing',
'references': [{'source': 'Data Protection Authorities (Jersey, Guernsey, '
'Isle of Man, UK)'}],
'regulatory_compliance': {'regulatory_notifications': 'Under investigation'},
'title': 'Data Breach at Prospect Custodian Trustees Ltd',
'type': 'Data Breach'}