Kennedys data breach

Published 28 August 2025

I am a Partner at the law firm Kennedys, and I have been working with the Church of England to develop the Redress Scheme.

I know you will already be aware of the unfortunate incident earlier this week in which an email was sent to people who had registered to receive updates in relation to the Redress Scheme. Due to human error and in breach of firm standards, the email displayed the email addresses of all recipients. I want to reassure you that no further personal details of individuals, or information relating to those individuals, was shared.

I want to take this opportunity to personally apologise that this error occurred. It does not reflect the standards that we expect of ourselves and as a firm but more importantly we know that it has caused trauma and concern, and seriously impacted on the trust that survivors and others have in the Redress Scheme. We recognise the seriousness of this incident, and we have launched an internal investigation to understand exactly how this incident occurred and to ensure it does not happen again.

We are also working with the Church of England and those leading the Scheme to determine how best to rebuild trust in the Redress Scheme, and ensure those affected by this incident are adequately supported and any harm suffered appropriately redressed.

We have received a number of complaints from those affected by this incident and are responding to those individually. If you have been impacted and want to lodge a complaint, or have any related questions or concerns, you can contact me at Helen_snowball@kennedyslaw.com or the Kennedys Data Protection Officer at KennedysDataProtectionOfficer@kennedyslaw.com. We have a dedicated team in place who are entirely focused on this matter.

We understand it can be distressing for some to receive further messages from the original thread. We have provided some guidance here that might help reduce or stop further messages coming to your inbox.

We know this will be a difficult time for many of you and additional support is available from Safe Spaces. They can be contacted on safespaces@firstlight.org.uk or 0300 303 1056.

I would like to reiterate again how sorry I am that this happened and our unwavering dedication to making it right.

With regards,
Helen Snowball

Published 27 August 2025

Regrettably on Tuesday evening, a message was sent from law firm, Kennedys, to 194 individuals and law firms who had registered to receive updates in relation to the Church of England Redress scheme. Due to human error, the email displayed the email addresses making them visible to all recipients. No further personal details of individuals were shared. Attempts to recall the message were only partially successful.

Kennedys has been working with the Church of England since March 2024 as its independent Scheme Administrator to help it develop further and manage its National Redress Scheme for victims and survivors of Church-related abuse. This was approved by the General Synod of the Church of England in July paving the way for the scheme to open for redress applications.

Kennedys is deeply sorry for the hurt and concern caused to everyone affected by this significant error and accepts full responsibility. We have contacted everyone who received the message and have reported the incident to the Charity Commission, the Information Commissioner’s Office and the Solicitors Regulation Authority. We will fully comply with any investigations.

Additionally, we have launched a full internal investigation to understand how this could have occurred and will incorporate any lessons learnt into our procedures immediately.

We understand the significant impact this will have on those affected for which we apologise unreservedly. We remain committed to supporting victims and survivors of Church of England-related abuse to secure the financial redress, therapeutic, spiritual and emotional support, acknowledgement of wrongdoing on the part of the Church, apology and other forms of bespoke redress under this scheme. Questions or concerns in relation to this data breach can be directed to KennedysDataProtectionOfficer@kennedyslaw.com