Claims Direct...

Growingreens

I used a company called claims direct to claim back PPI. I owe them a percentage but am yet to pay them. They chased me the other day and about an hour later I had around 50 plus emails to my email address of Litigation warnings for other customers on their database. They included reference numbers, names and full addresses and amounts owed. I phoned them up and they said could I please deleted them. I said I wanted reassurance that my information hasn’t potentially gone to 1000’s of other people but the guy on the phone said he’d need to speak to his manager. This was 3 days ago and I’ve had no correspondence back? Just looking for advice. Many thanks in advance. 

Grumpy_chap

Probably the incorrect forum.

But report the data breach to the Information Commissioners Office:
https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/personal-data-breaches/

Growingreens

Thank you. What forum would you recommend  as I was unsure
Many thanks 

Grumpy_chap

I am not sure where the correct area of the forum would be.  I guess an admin will move it to the correct place.

[Deleted User]

The PPI and reclaiming board?

dunstonh

Claims companies are now regulated by the FCA and are required to follow the same rules as the banks and other financial institutions.     Quite ironic really that you can use the same method against them that they used against the bank. 

Supplying you with consumer data on that scale is a serious data protection breach.    The firm should probably be self reporting this breach to the FCA given the number of people who you say it is.   However, you may wish to put in a formal complaint with the firm and report a breach here: https://ico.org.uk/

[Deleted User]

I agree with Dunstonh, this would be regarded as an incredibly serious breach by the ICO and the FCA, do not delete the emails, they are evidence of the breach. 

They should have self report themselves within 72 hours, so they have already passed that deadline.

Growingreens

Seven days later and I’ve finally had the reply below. Would you say this is satisfactory? I still have concerns that my data has been handed out to potentially 1000’s of people?

Dear Mr Davies,

 

Thank you for your recent telephone call.

 

Due to a technical issue, you may have received email(s) which included a different name and address to your own.

 

We can assure you that your name and address have not been shared with anyone else.

 

In accordance with General Data Protection Regulations 2018 (GDPR) we have conducted a risk assessment, and in response, we have logged this incident inline with our regulatory requirements. 

 

adamp87

I don’t really know what else they can say really. 

If you are still unhappy report it to the ICO.  Nothing else you can really do. You still will have your data with them regardless. 

Jeremy535897

I would ask them why they are so sure your information hasn't been shared with others, but if it is just your name and address, the electoral roll already has that. Given that the government's own website, Companies House, freely allows access to documents showing name, address, date of birth and even signature (on older documents) of company officers, who might just be leaseholders in a block of flats, I think the government should put its own house in order.

diggingdude

Lets be honest, are you upset about your data or trying to get out of paying what you owe?  The answer is as follows, pay your bill and report the data breach as advised above