Alternative Market Briefing

FCA convicts and fines first individual for data protection breach

Thursday, October 30, 2025

Matthias Knab, Opalesque:

Taunton-based Luke Coleman, 30, pleaded guilty to unlawfully obtaining and disclosing personal data in breach of the Data Protection Act, following a prosecution by the Financial Conduct Authority (FCA). The case is the FCA's first prosecution under the Act.

While employed by Virgin Media O2, Coleman unlawfully accessed confidential customer data and sold it to family friend Nicholas Harper. The data was used in a boiler room fraud. Coleman was suspended by his employer pending the outcome of the criminal investigation.

Two individuals connected to the scheme, Raymondip Bedi and Patrick Mavanga, were sentenced to a combined 12 years of imprisonment for a crypto scam that defrauded at least 65 investors out of GBP1,541,799.

Harper previously pleaded guilty to assisting an offence in breach of the Data Protection Act, and was later acquitted by a jury of conspiracy to defraud.

Outcome and penalties

Offence: Unlawful obtaining and disclosure of personal data (s.170(1) Data Protection Act 2018).
Sentence: Fine of GBP384 (maximum penalty for this offence), surcharge of GBP38, and GBP500 contribution to prosecution costs.
Date of birth: Luke Coleman, 7 December 1994.

Regulator statement "Coleman abused his position of trust and enabled others to commit crimes which led......................

To view our full article Click here

Article link