“If someone believes they’ve suffered a financial loss following the attack, or have been affected in another, non-financial way, then in the first instance they should let the service provider know, raising a formal complaint if they’re unhappy with the service they’ve received,” an ombudsman spokesman said.