Generally, the company is liable for a data breach, as they are responsible for safeguarding your data. However, if an employee’s actions caused the breach, the company may still be held accountable if it was a criminal offence, though the claims process relating to compensation may differ. Get in touch to discuss the specifics of your case.