Yes. Quarterdeck Life Ltd reported the incident to the UK Information Commissioner's Office under case reference IC-556590-F4V7.
Quote that reference if you contact the ICO, rather than taking our word for it.
Which company holds your data
Quarterdeck Life Ltd is the company that manages the people who work the trips, and it holds your records. It is a separate company from the ones running the trips themselves, which is why your notice came from Quarterdeck rather than from a brand you may have worked under.
If you were originally a Yacht Week skipper, your record moved to Quarterdeck when it was set up. That is why you may have heard from Quarterdeck about a role you think of as a Yacht Week one.
The same incident affected other companies in the group, which made their own separate reports. If you also travelled as a guest, you may receive a separate notice from them about a separate record.
Your right to complain
You can complain to your national data protection authority at any time, and you do not need our agreement or our involvement to do it. You can go to them directly whether or not you have raised anything with us first, and whether or not you are satisfied with what we have told you.
The ICO is at ico.org.uk. If you live elsewhere, your own country's authority can take your complaint.
What reporting does and does not mean
Reporting an incident is a legal obligation, not a resolution. It does not undo what was copied, and it does not settle anything between you and us. We are saying it plainly because notifying a regulator is sometimes presented as though it closes the matter. It does not.