Possible breach of data?

craggs

Hi

I am wondering if anyone could advise.

I logged into my energy account 2 nights ago and noticed my direct debit changed and the credit on my account everytime I refreshed my page.

Then my account number change and another name came up.I was able to access another account,infact 2 names came up,but with one my account number stayed the same.

I did screen shots and contacted my energy company,who asked for them.

They have gotten back to me and admitted an updated caused a small number of accounts to cross access and they are looking into it how much data could of been accessed,if any,although I was able to access another persons account.I provided them with there name and account number.

They want me to delete the screenshots,and they have apologised.

Im not sure what if anything I can do,I have for now not deleted the evidence.I don't know what steps to take,if this is serious or not so bad.

I don't want to name the company ,certainly not for now.

Thank you

wavelets

craggs wrote: »

Hi

I am wondering if anyone could advise.

I logged into my energy account 2 nights ago and noticed my direct debit changed and the credit on my account everytime I refreshed my page.

Then my account number change and another name came up.I was able to access another account,infact 2 names came up,but with one my account number stayed the same.

I did screen shots and contacted my energy company,who asked for them.

They have gotten back to me and admitted an updated caused a small number of accounts to cross access and they are looking into it how much data could of been accessed,if any,although I was able to access another persons account.I provided them with there name and account number.

They want me to delete the screenshots,and they have apologised.

Im not sure what if anything I can do,I have for now not deleted the evidence.I don't know what steps to take,if this is serious or not so bad.

I don't want to name the company ,certainly not for now.

Thank you

You've done part of what you need to do - and the supplier is now doing what they need to do ... according to the information you have provided here, ... at least for now

All that is left for you to do at this time is follow the intructions provided to you by the supplier.

Edit: On a more positive note, may I be the first to provide you with a warm welcome back to MSE following a 4 year posting hiatus.
https://forums.moneysavingexpert.com/showpost.php?p=74780609&postcount=279

[Deleted User]

If you wish, you could inform the Information Commissioner's Office
https://ico.org.uk/make-a-complaint/

t0rt0ise

It was a mistake. They've corrected it. No need to take it further.

kim81

Sounds like they are on top of things. You could change your password just to be on the safe side.

societys_child

Im not sure what if anything I can do,I have for now not deleted the evidence.I don't know what steps to take . . .

How much do you want?

badmemory

but it should be necessary to ask that whilst they have corrected this specific "mistake" have they corrected the other similar ones caused by the same problem!

Grey_Critic

Of course you should report it. Why have a Data Protection Act if nobody does anything when it gets broken.

craggs

societys_child wrote: »

How much do you want?

How much??

craggs

badmemory wrote: »

but it should be necessary to ask that whilst they have corrected this specific "mistake" have they corrected the other similar ones caused by the same problem!

Unsure,I have been back InTouch and they don't actually know how much data has been leaked.If I was able to access another person's acount,name,address,bills ,then I guess it works both ways,they also don't know how many,I have asked that.

I'm unsure if they have contacted other either.