Ffrees - security breach

castle96

Just received this email. Never heard of Ffrees though they seem genuine. Anyone else ? Anything I should do ?





Dear xxxxxx

Reference A13xxxxxx

This email notifies you of an information security incident that may affect you. It tells you what we’re doing in response to the incident, what information may be affected, and what you should do.
As soon as we became aware of the incident, it was dealt with quickly and effectively. Ffrees has investigated, remedied the vulnerability and reviewed and re-established full security measures.

What happened?
An incident was identified where information was temporarily exposed on one of our systems. We know that there was one unauthorised access to the information. It was reported to us and was dealt with promptly.
Investigations into the incident continue and we’ll provide updates should anything change, but it’s important that we notified you as soon as we could.

What information was exposed?
The exposure involved information held for marketing purposes between 2012 and early 2014. The information exposed that relates to you is:

• Personal information at the time:
  • Full name
  • Date of birth
  • Email address

What is Ffrees doing about it?
Since it was identified, this incident has been our top priority. A summary of what we’ve done:

• We have rectified the exposure and made sure our systems are secure
• We have appointed independent security advisors to ensure we are doing everything we can to respond to the incident in the best way possible, to ensure best practice and to protect customers
• We have notified people affected by this incident
• We have notified the Information Commissioner’s Office (ICO)
• We are continuing to investigate the incident

What should I do?
We’ve seen no evidence nor received any reports that the exposed information has been misused. However, you should stay vigilant for any signs of identity theft. We strongly advise you take the recommended precautions atico.org.uk/for-the-public/identity-theft.

How can I find out more about this?
We’ve included a fuller list of questions and answers about the incident below this email. The list will be published and updated at ffrees.co.uk/security.

Can I contact you directly? Yes, you can contact us in two ways:

• By telephone on 0800 063 9123
  We’ve set up a dedicated telephone line to answer your questions about this incident. You can call us between 9am and 5pm Monday to Saturday, and between 10am and 4pm on Sunday. We’ll keep the line open for the next two weeks. Thereafter you can contact us in the normal way.
• By email to [EMAIL="security@ffrees.co.uk"]security@ffrees.co.uk[/EMAIL]
  You can email us at any time. We’ll respond within 24 hours.

We’re serious about keeping your information safe, and we wanted to inform you as soon as we could. We would like to reassure you that we have been working hard to investigate and remedy the problem and have reviewed and re-established full security measures. We’re sorry that this happened and for any worry it causes you.

[Deleted User]

castle96 wrote: »

Anything I should do ?

This, probably.

castle96 wrote: »

What should I do?
We’ve seen no evidence nor received any reports that the exposed information has been misused. However, you should stay vigilant for any signs of identity theft. We strongly advise you take the recommended precautions atico.org.uk/for-the-public/identity-theft.

Have you had or enquired about any credit products with them?

castle96

no. never heard of them. Not applied for any credit, anywhere