01 · In plain English
What happened.
On 29 October 2025 the FCA prosecuted and convicted Luke Coleman for unlawfully obtaining and disclosing personal data in breach of the Data Protection Act. Coleman, who was employed by Virgin Media O2 and was suspended pending the criminal investigation, sold confidential customer data to a family friend for use in a boiler‑room fraud. The court ordered Coleman to pay a £384 fine, a £38 victim surcharge and £500 towards prosecution costs (total recorded penalty £922).
Summary generated from the FCA notice and press reports. Check the final notice below before relying on it.
02 · Enforcement details
What the FCA published.
On 29 October 2025, the Financial Conduct Authority fined Luke Coleman £922. Luke Coleman pleaded guilty to unlawfully obtaining and the subsequent disclosure of personal data in breach of the Data Protection Act, following a prosecution by the FCA. A fine is the maximum penalty for this type of offence. Coleman was fined £384. He was ordered to pay a £38 surcharge and prosecution costs contribution of £500. Source: the FCA's published list of 2025 fines. Notice:
03 · Press coverage
How it was reported.
These links go to other sites. Some may need a subscription.
Track FCA enforcement
Watch the firms you work with on FRN Watch.
We check the FCA register every day. Get an email when a firm on your watchlist has a change to its permissions or requirements, or picks up a new disciplinary entry.