01 · In plain English
What happened.
On 29 October 2025 the FCA prosecuted and convicted Luke Coleman for unlawfully obtaining and disclosing personal data in breach of the Data Protection Act. Coleman, who was employed by Virgin Media O2 and was suspended pending the criminal investigation, sold confidential customer data to a family friend for use in a boiler‑room fraud. The court ordered Coleman to pay a £384 fine, a £38 victim surcharge and £500 towards prosecution costs (total recorded penalty £922).
Summarised from the FCA's notice and press reports. The FCA's own text and documents below are the authoritative record.
02 · Enforcement details
What the FCA published.
On 29 October 2025, the Financial Conduct Authority fined Luke Coleman £922. Luke Coleman pleaded guilty to unlawfully obtaining and the subsequent disclosure of personal data in breach of the Data Protection Act, following a prosecution by the FCA. A fine is the maximum penalty for this type of offence. Coleman was fined £384. He was ordered to pay a £38 surcharge and prosecution costs contribution of £500. Source: the FCA's published list of 2025 fines.
03 · Press coverage
How it was reported.
These links go to other sites. Some may need a subscription.
Track FCA enforcement
Watch the firms and people you work with on Firmwatcher.
Add any firm or individual on the FCA register to your watchlist and get an email when a new requirement, disciplinary action or change of role is recorded.