Data breach by Scottish Power

joeysmum

so I was on the chat with Scottish Power discussing the fact that they havent as yet changed my tariff a week after requesting it online, did it a second time within the week and still not done, so I resulted to speaking to them via the chat. To cut a long story short, after being asked to confirm my name, dob, address, account number, email and telephone numbers, which I did, the operator said he couldnt help but would refer it on to a team who would help. I asked for a copy of the online chat via email to which he said he would send it after I disconnected the chat. No email was received. that night my mobile and home phone kept ringing. I answered it and it appeared to be someone who had received the email that was intended for me but she had received it containing all of my personal details. I've rung Scottish Power to complain and they are looking into it, not very quickly it appears, but what can I do. I am quite distressed about it all really.

Thanks in advance!

k3lvc

joeysmum wrote: »

I've rung Scottish Power to complain and they are looking into it, not very quickly it appears, but what can I do. I am quite distressed about it all really.

Out of interest what do you want them to do 'quickly' ? The issue's happened and they can't turn back time.


Given the recipient has contacted you rather than running away with all your personal details I'd assume there's nothing to be 'distressed' about.


When you called with your complaint what did they say ?

[Deleted User]

First, complain to SP. If you don't get adequate financial compensation (minimum £150) tell them you'll report them to the ICO - and do so.


On the more general point, the more information these bounders have about you, the worse any potential leak will be. Utility companies need your name (not full name) and address; nothing more. They certainly don't need your DoB or telephone number. They like your DoB so they can report your account to the credit reference agencies, but in the past I've furnished false DoB and it has not been a problem (and No, this is not fraud!). My current supplier, EDF, doesn't report accounts to the reference agencies anyway.


I cannot think of a single good reason why a utility company needs your phone number.

joeysmum

they didnt really say anything to be honest. They said they would call me back in 5 working days within a predetermined two hour time frame. I said then I'd like at least some answer to how this has happened before then - they didnt think that was likely! I'm just surprised that considering they sent me my bill by email, containing the last three digits of my account number and the rest blanked out that they happily send everything about me to someone else.

Benight

johnsmith1890 wrote: »

...
I cannot think of a single good reason why a utility company needs your phone number.

To call or text you? :cool:
There are times when any supplier, let alone a credit provider as well, sometimes needs to contact it's customers regarding ongoing situations.

Benight

johnsmith1890 wrote: »

On the more general point, the more information these bounders have about you, the worse any potential leak will be. Utility companies need your name (not full name) and address; nothing more. They certainly don't need your DoB or telephone number. They like your DoB so they can report your account to the credit reference agencies, but in the past I've furnished false DoB and it has not been a problem (and No, this is not fraud!). My current supplier, EDF, doesn't report accounts to the reference agencies anyway.
.

A customers DoB is generally provided for the purposes of security.
If you call the energy supplier to discuss something, they need to ensure they are discussing iot with the correct person, and a DoB is often used as a type of security. If it's only used for this purpose, then as long as you remember the date provided, it won't be an issue.
(The odd supplier asks for a memorable date, rather than a DoB)

If, as you claim, the DoB is required to report your credit account to the credit reference agency (or obtain a credit reference from them), then deliberately giving false information is indeed fraud.

[Deleted User]

Benight wrote: »

...
If, as you claim, the DoB is required to report your credit account to the credit reference agency (or obtain a credit reference from them), then deliberately giving false information is indeed fraud.

That might be the case (and it's debatable, at that) if they were quite explicit in the T&Cs that they need your correct DoB to interact with the agencies. I have never seen such a statement.

Benight

johnsmith1890 wrote: »

That might be the case (and it's debatable, at that) if they were quite explicit in the T&Cs that they need your correct DoB to interact with the agencies. I have never seen such a statement.

My reply was only based on the information you, yourself, provided in your earlier post, in particular

johnsmith1890 wrote: »

...They like your DoB so they can report your account to the credit reference agencies,...

I have not considered the veracity of your earlier post in my reply, save to commence that part of the reply with "If, as you claim,..."