Experian - security issue ?

biggoatyman

I recently applied for my statutory credit report from Experian. The process requires that you enter your details and credit card info on their website, so they can collect the £2 charge.

They then send you a letter by post which contains a passkey to allow you to log in and see the report.

When the letter arrived, I duly logged on to the Experian site, and was alarmed to see that the only information required to view my credit report was contained in this one letter, namely the passkey and my postcode. I had assumed that at least some other piece of data that was not written on the letter would be required, even if it was my date of birth or something.

So if this letter had gone astray in the post, a third party could have opened it and gained full access to my confidential credit report without any further information being required ! This could have severe ID theft consequences.

I don't think that Experian have taken due care of my personal data by using this process. I have written to them to express my concerns, but thought I would warn others about this in the meantime.