In a case that underscores the vulnerabilities faced by even the most secure and exclusive institutions in the digital age, a London man has appeared in court charged with orchestrating a £5 million blackmail attempt against the prestigious private members’ club Soho House. Amit Sharma, a 50-year-old from Bromley, south London, stood before Bromley Magistrates’ Court facing three serious charges. The core allegation is that between late June and early August of last year, Sharma stole sensitive client data from the club’s systems and then allegedly contacted Soho House’s boss, Andrew Carnie, demanding a staggering £5 million to prevent the sale or exposure of that information. The prosecution outlined a campaign of threats, claiming Sharma sent “numerous messages to the company saying he would sell details of their clients,” leveraging the stolen data as his weapon. After a brief hearing where Sharma spoke only to confirm his personal details, he was granted bail under the strict condition that he have no contact with any Soho House employees, and the case was escalated to Woolwich Crown Court for a more comprehensive hearing scheduled for June 8.
The target of this alleged scheme is no ordinary venue; Soho House is a global byword for exclusivity and celebrity patronage, making the potential breach particularly sensitive. Founded above a restaurant in London’s Soho district in 1995, the club has grown into an empire with 48 locations across 19 countries, including the famed Soho Farmhouse in the Cotswolds. Its membership is a veritable who’s who of global stardom, with reported attendees and members including the Duke and Duchess of Sussex—who famously had their first dates at the Dean Street venue—as well as celebrities like Taylor Swift, David and Victoria Beckham, Leonardo DiCaprio, and Margot Robbie. With a waiting list rumoured to exceed 99,000 people, the club’s allure is built on discretion and privacy, qualities that an alleged data thief would find most valuable to exploit. The prosecution was careful to note there is no suggestion that any specific celebrity data was compromised, but the mere threat to such a clientele inherently carried immense coercive power.
The specific charges against Sharma paint a picture of a calculated digital intrusion followed by a campaign of pressure. The first charge is straightforward blackmail. The second, more technical charge falls under the Computer Misuse Act 1990, alleging that between June 1 and August 9, 2025, Sharma “caused a computer to perform a function with intent to secure unauthorised access to a program or data,” specifically “retained customer data,” with the intent to commit further offences. This suggests a deliberate hack or unauthorized access to the club’s systems to harvest information. The third charge is harassment, relating to the same period and directed at Soho House employees, indicating that the alleged blackmail attempt was not a single communication but a sustained effort that may have caused significant distress within the company as staff grappled with the threat.
This incident transcends a simple criminal case, serving as a stark reminder of the modern intersection of cybercrime, corporate security, and celebrity culture. In an era where personal data is a prized commodity, the alleged attack on Soho House highlights how traditional symbols of physical exclusivity are now critically vulnerable in the digital realm. A club whose doors are famously closed to the public found its virtual gates potentially breached, demonstrating that no amount of velvet rope can protect against a determined cyber intrusion. The case raises urgent questions for all private entities holding sensitive client data about the robustness of their digital defenses, as the value of that data is measured not just in bytes, but in reputation and the very trust that forms the foundation of their business model.
For Soho House & Co., the parent company, the allegations represent a profound challenge to its core brand promise of privacy and sanctuary for its high-profile members. While the company has not issued a public statement detailed in the court report, such an event would typically trigger intensive internal security reviews and crisis communications efforts to reassure its illustrious membership. The club’s ethos is built on creating spaces where celebrities can relax away from the public eye; a successful data breach would represent the ultimate invasion of that carefully cultivated sanctuary. The fact that the alleged perpetrator felt he could demand £5 million underscores the perceived immense value—and potential damage—associated with the club’s client list.
As the case proceeds to Crown Court, the legal process will now delve deeper into the evidence surrounding the alleged data theft and the explicit blackmail communications. The outcome will be watched closely not only for its judicial conclusion but for its broader implications. It stands as a cautionary tale for the elite hospitality industry and for any organization that manages the private information of high-value clients. The saga of the alleged £5 million blackmail attempt against Soho House ultimately illustrates a contemporary truth: in today’s world, a hacker with a laptop can pose as grave a threat to exclusivity as an uninvited guest at the door, proving that the most valuable assets are often no longer tangible, but digital.
