In a worrying trend, the proliferation of data breaches has enabled a surge in cyber scams, with criminals exploiting stolen personal information to target innocent individuals. The BBC’s recent investigation sheds light on the harrowing experiences of several victims, highlighting the urgent need for stronger data protection measures.
One such victim, Sue, fell prey to a “SIM swap” attack, where scammers tricked her mobile network provider into transferring her phone number to a new SIM card. This allowed the criminals to gain access to her online accounts, including her Gmail and bank accounts. The scammers then opened a credit card in Sue’s name and racked up over £3,000 in fraudulent purchases.
In another case, Fran from Brazil discovered that her Netflix account had been hijacked, with the perpetrators increasing her monthly subscription. Investigations revealed that Fran’s email address had been exposed in multiple data breaches, making her vulnerable to such attacks.
Leah, who runs a small business using Facebook ads, was also targeted by scammers. She received a phishing email claiming she was owed a refund, which led to the criminals taking over her business account and posting disturbing content, causing her to be blocked from using Messenger.
These incidents are just a few examples of the widespread impact of data breaches, which have become alarmingly common. According to Proton Mail’s Data Breach Observatory, there have been 794 verified breaches from identifiable sources in 2025 alone, exposing over 300 million individual records.
Cybersecurity experts warn that criminals are willing to pay premium prices for stolen data, as it consistently generates profits through fraud, extortion, and cyber attacks. As companies struggle to effectively protect their customers’ information, the burden often falls on the victims to navigate the aftermath of these breaches.
While some firms have offered limited support, such as Ticketmaster’s provision of free credit monitoring, others like Marks & Spencer and Qantas have not extended such services to their affected customers. The lack of consistent and comprehensive assistance has left many victims feeling helpless and vulnerable.
The rise in cyber scams highlights the urgent need for stronger data protection measures and more robust support systems for those affected by data breaches. As the digital landscape continues to evolve, it is crucial that both individuals and businesses take proactive steps to safeguard their personal and sensitive information, and that policymakers and regulators work to establish clear guidelines and accountability for companies handling such data.
