Data security incident at HMR (Hammersmith Medicines Research) - Personal Documents Hacked

andyuk2005

Hi all,
I received an email from HMR (Hammersmith Medicines Research) yesterday regarding them having a data breach on their systems by a hacking group. They managed to download and put online personal documents (proof of address, passports etc) along with medical information for volunteers for their medical trials.
From what I understand, there is a good chance I am a victim of this. There is a good chance my information may be used/sold etc for the eventual ends of defrauding myself or a company.
The email is rather useless, telling me they are sorry but I should contact my bank as I am now a potential victim (what are my bank going to do?!!). They helpfully (!) say I should seek advice from Action Fraud, etc.
I would like to sign up to Cifas, but as I remember there is a charge for this. Amongst many other things, I think HMR should cover this cost.
Has anyone got any experience regarding this or any advice on what I can expect I can get them to do to ensure I am protected as much as possible, and if I should expect anything out of them?
Thanks!

andyuk2005

bump!.....

mcpitman

I think it's called a "protective registration" on CIFAS, which bumps many auto applications out to be annually underwritten I think, usually more ID checks etc too.

In addition i would ask for a complete re-send of all Debit/Credit cards, with new 16 digit numbers and 3 digit security numbers.
Change all passwords for internet banking or accounts where purchases can be made (Ebay/Amazon etc).
Have you contacted Action Fraud yet?

Shakin_Steve

Inaction fraud, I'm afraid. 

sumprat

For what little it is worth, my wife have exactly the same issue and we have requested that HMR cover the CIFAS Protective Registration fee. We yesterday received their predictable reply:

A company of our size truly doesn't have the resources to compensate so many victims – particularly because the COVID-19 crisis has forced us to stop almost all our current projects, and to postpone scheduled ones for the foreseeable future.

Considering that a company of that size have (their words) "been running for 27 years and done over 800 studies" and presumably been paid very good money by the various pharmaceutical companies they do the studies on behalf, it is very disappointing that they pay so little heed to the people whose data they have "lost".

andyuk2005

Absolutely, I agree with you there.
I have engaged with a law firm who have taken all of the details of this case, and will be pursuing on my behalf. I don't know what to believe from a law firm but they appear to have a confident outlook for some kind of payout from HMR, maybe even if just through their insurance if they have any.
I can direct message the details of the firm if you like @sumprat ?

sumprat

andyuk2005 said:

Absolutely, I agree with you there.
I have engaged with a law firm who have taken all of the details of this case, and will be pursuing on my behalf. I don't know what to believe from a law firm but they appear to have a confident outlook for some kind of payout from HMR, maybe even if just through their insurance if they have any.
I can direct message the details of the firm if you like @sumprat ?

That would be much appreciated Andy. Thank you.

debitcardmayhem

@hannahmd One question have you read the forum rules, if not then do so and then get Which to approach the forum team you will get permission to post requests for data. Otherwise everyone will hit what was the Spam button sadly it's called the report button now. If you reply before tomorrow a.m. I will not hit the button and report your posts.