Personal data breach

[Venisonpie]

Not sure if this is the right forum so mods may want to move.

Received a letter yesterday from my previous employer (left in May) stating they've encountered a cyber attack in early September and are concerned employees (current and ex) personal data may have been compromised.

They've outsourced a helpdesk to Experian who were unable to advise what has been breached but areas of concern are HR, payroll and pensions. No biggies then!

My concern is identity cloning and using info to obtain finance etc which is not easily rectified as even approaching my bank doesn't cover off the rest of the market.

Has anyone got practical advice regarding how to mitigate the risk? Experien lady suggested I cancel my passport and driving licence if they were submitted as proof of identity when I was recruited. Nice wasy one that.

[M1AGM]

I’d sign up to a credit report service like experian or clearscore. Then you will get alerts if any credit searches or applications are made in your name.

[randlemarcus]

Not great advice from Experian. The driver number on your licence survives across photo card renewals.

Do some reading, but start by signing up to a small spectrum of Clearscore/Credit karma type apps,and asking your employer nicely if they will cover costs as they arise (I suspect the Home Office won't just issue a new passport for free)

[Venisonpie]

Thanks, in fairness to the company they've offered a 12 mth free subscription to Experian which I've requested.

Will just need to keep a watch.

[FriedMarsBar]

The UK Govt's Cyber Dept generally have accessible and practical guides, here's the one personal data breaches.

https://www.ncsc.gov.uk/guidance/data-breaches#:~:...

I'd be expecting some confirmation via your previous employer if your data was breached.

Good luck.

[Scabutz]

Im not sure precisely what it is called but there some enhanced security hat can be added to your credit files so more information is needed when applying for credit. My wife had someone get her detail and create a mobile phone contract. We found out when the mobile was delivered. When she spoke to the fraud team they said they would put a fraud marker on so next time she applies it needs more info.

Youd think Experian though would know all about this and be able to advise.

[randlemarcus]

The fraud thing is CIFAS, probably best reserved until there is actual fraud though, as I believe (though its been many many years) that some genuine applications by you may be scored lower because of the CIFAS flags.

Not at all sure I would trust Experian with any of my money though.

[M1AGM]

Scabutz said:

Im not sure precisely what it is called but there some enhanced security hat can be added to your credit files so more information is needed when applying for credit. My wife had someone get her detail and create a mobile phone contract. We found out when the mobile was delivered. When she spoke to the fraud team they said they would put a fraud marker on so next time she applies it needs more info.

Youd think Experian though would know all about this and be able to advise.

I has this when someone tried to open a bank account with my name and an address I had lived at 10 years prior. The application got rejected because of the electoral roll disparity. I was contacted by the bank in question and they raised a flag on my credit file so any future applications needed more proof/ID etc. Didn’t cause me any issues, was a few years ago.

[Mojooo]

Cancelling your ID will do bugger all as well because other financial institutions are not going to check whether it is current

[superlightr]

Venisonpie said:

Not sure if this is the right forum so mods may want to move.

Received a letter yesterday from my previous employer (left in May) stating they've encountered a cyber attack in early September and are concerned employees (current and ex) personal data may have been compromised.

They've outsourced a helpdesk to Experian who were unable to advise what has been breached but areas of concern are HR, payroll and pensions. No biggies then!

My concern is identity cloning and using info to obtain finance etc which is not easily rectified as even approaching my bank doesn't cover off the rest of the market.

Has anyone got practical advice regarding how to mitigate the risk? Experien lady suggested I cancel my passport and driving licence if they were submitted as proof of identity when I was recruited. Nice wasy one that.

you may have already done this but if you own a property then you can put an alert on the Land registry if someone tries to send an entry to change the title or put a charge on it ie a secured loan against your property. Not really anything to do with pension/personal details but thought I would say if it helps.

[joropug]

randlemarcus said:

The fraud thing is CIFAS, probably best reserved until there is actual fraud though, as I believe (though its been many many years) that some genuine applications by you may be scored lower because of the CIFAS flags.

Not at all sure I would trust Experian with any of my money though.

Last time i worked on credit , CIFAS markers stopped automatic processing and put it in front of a human to review the alert but didn’t impact eligibility.

I would do it. You can add your real phone number and a password to the notice so they can validate it.

[Venisonpie]

joropug said:

randlemarcus said:

The fraud thing is CIFAS, probably best reserved until there is actual fraud though, as I believe (though its been many many years) that some genuine applications by you may be scored lower because of the CIFAS flags.

Not at all sure I would trust Experian with any of my money though.

Last time i worked on credit , CIFAS markers stopped automatic processing and put it in front of a human to review the alert but didn’t impact eligibility.

I would do it. You can add your real phone number and a password to the notice so they can validate it.

Thanks for the advice.]

Company has confirmed today my driving licence has been compromised but as said in another post there's no point cancelling it as the replacement will contain identical info. I guess I'll notify my bank, notify the land registry and keep an eye on my credit report for any signs of unusual behaviour.

[pork911]

Venisonpie said:

Thanks for the advice.]

Company has confirmed today my driving licence has been compromised but as said in another post there's no point cancelling it as the replacement will contain identical info. I guess I'll notify my bank, notify the land registry and keep an eye on my credit report for any signs of unusual behaviour.

have they confirmed what data they still held for you and what their plans were for disposing of it and when?

[Venisonpie]

pork911 said:

have they confirmed what data they still held for you and what their plans were for disposing of it and when?

No but good questions.