Arnold Clark cyber breach

[Davie_GLA]

So i got the letter from them that they are confident that my details (account number, sort code, email address and address) were obtained from the attack late last year.

THey've offered 2 years of some premium equifax credit monitor service that seems a bit like the horse having bolted. I'm not one for getting my compo face on but if anything happens with my identity or credit rating is there any recourse? The thread on MSE seems to state that they are untouchable because they fessed up and offered a service to make sure we can get ahead of any breach but surely it's all just a little too little, much too late?

I am super paranoid about my credit rating, i spent a long time rebuilding it after making some questionable decision when i was much, much younger.

Mods - If there's a thread already then let me know, i'm mobile at the moment and search isn't returning much.