In most cases, no. Here is the reasoning, so you can judge it yourself rather than taking our word for it.

What was held and copied was text typed into database fields — a passport number, alongside your date of birth and nationality. No scans, photographs, signatures or machine-readable strips were held or taken.

The distinction is the whole answer. A scan of a passport can be used to impersonate the document itself, because it carries your photograph and signature. A number cannot. It is a strong supporting detail for someone attempting fraud in your name, which is why the guidance on watching your credit file matters, but on its own it does not let anyone travel or open a border-controlled account as you.

The full list of what was and was not copied is in What was copied in the incident?

If you see evidence that your identity is actually being misused — an account or credit application in your name that you did not make, or contact from an authority about something you did not do — then the calculation changes. In that situation, speak to your passport authority and tell us, so we can look at your case specifically.

The measures that actually reduce the risk from an exposed passport number cost nothing — watching for accounts opened in your name, and putting a marker on your credit file. See What should I do to protect myself?

If you have incurred a cost, or intend to, write to the notice address and set out what you are asking for. It is logged and reviewed by our legal team rather than answered by return — see Will you compensate me?

If you were a skipper, host or Event Team member rather than a guest, your records are likely to sit with Quarterdeck, a separate company where the position on documents differs. Its answers are at help.quarterdeck.co — use the address on the notice you received rather than relying on this page.