As anticipated in our post on 22 May, the easyJet data breach story is getting worse for the company rather than better. A group action claim for compensation has now been launched on behalf of the pool of affected customers.  If the case goes to trial or if a settlement is reached, the details of which are made public (which is unusual) it will be interesting to see what value is attributed to the loss of privacy of each customer. This is likely to depend on what data was exposed for the 4 month period. Only some customers had credit card details revealed, but all had passport and travel details compromised. It is still possible that the number of affected customers may change as the incident is investigated further.