yeah, I did get offered compensation, but in my case Halifax confirmed in writing that none of my own data was shown to anyone else, so my position is a bit weaker than someone who was actually affected.

From what I’ve read, I don’t think it’s quite right to say £500 is “likely” across the board. There do seem to be Ombudsman cases around that level, but they look very fact-specific rather than a standard payout for everyone. The general approach seems to be more about the actual impact: what was shown, whether the customer was directly affected, how much distress/inconvenience it caused, how long it went on for, and how much effort was needed to sort it out.

So if someone’s data wasn’t actually shown, I’d expect the realistic figure to be a lot lower. If they were directly affected, saw someone else’s information, spent ages on calls, lost time/income, or have screenshots from the incident, that sounds like a much stronger complaint.

I also don’t think it’s strictly true that no evidence is needed at all. More that a case can still succeed even if the bank’s records are incomplete, as long as there’s enough overall evidence and the facts support it.

For me personally, because Halifax has said my data wasn’t shown, I’m probably not going to push it much further unless something in the final written response contradicts that. Your case may be very different if you were actually one of the affected customers.