Arnold clark data breach

DD92

Some of you may or may not have heard about an Arnold clark data breach a couple of months ago (although they're only notifying me today). In an email they sent today they said that hackers have got their hands on unsigned copies of finance agreements from 2019 which they say may have contained name, address details, vehicle registration number, and bank account and sort code details. 

Both me and my then girlfriend, now wife, bought cars from them in 2019. What steps can I take to protect us. 

Since 2019 I've got a new address and no longer have that car, I have the same bank account but thinking about a current account switch. NI number I can't really do anything about. My wife since 2019 has a new surname, different address but same car and bank account. 

So I think they have a lot of out of date information so is identity fraud harder for them? I've activated the complimentary experian identity plus membership they gave us. Is there anything I can do to protect us.

Also what are my rights with regards Arnold Clark, is there some sort of compensation I can claim? Or do I have to suffer actual loss first? 

Aylesbury_Duck

I'd change all passwords to your email, banking, and other accounts for a start.  Turn on MFA for any account that offers it, too.  Other than that, I wouldn't worry too much.

In theory, yes, you need to have losses to go for compensation.  Don't get sucked into ambulance-chasing type lawyers offering riches on social media.

SpudGunPaul

DD92 said:

Some of you may or may not have heard about an Arnold clark data breach a couple of months ago (although they're only notifying me today). In an email they sent today they said that hackers have got their hands on unsigned copies of finance agreements from 2019 which they say may have contained name, address details, vehicle registration number, and bank account and sort code details. 

Both me and my then girlfriend, now wife, bought cars from them in 2019. What steps can I take to protect us. 

Since 2019 I've got a new address and no longer have that car, I have the same bank account but thinking about a current account switch. NI number I can't really do anything about. My wife since 2019 has a new surname, different address but same car and bank account. 

So I think they have a lot of out of date information so is identity fraud harder for them? I've activated the complimentary experian identity plus membership they gave us. Is there anything I can do to protect us.

Also what are my rights with regards Arnold Clark, is there some sort of compensation I can claim? Or do I have to suffer actual loss first? 

You've answered your own question there, as it stands you have no loss to be compensated for.  

MattMattMattUK

DD92 said:

Some of you may or may not have heard about an Arnold clark data breach a couple of months ago (although they're only notifying me today). In an email they sent today they said that hackers have got their hands on unsigned copies of finance agreements from 2019 which they say may have contained name, address details, vehicle registration number, and bank account and sort code details. 

Both me and my then girlfriend, now wife, bought cars from them in 2019. What steps can I take to protect us. 

You do not really need to do anything, although keeping an eye on your credit cards would be advisable, it is advisable on an ongoing basis anyway.

DD92 said:

Since 2019 I've got a new address and no longer have that car, I have the same bank account but thinking about a current account switch. NI number I can't really do anything about. My wife since 2019 has a new surname, different address but same car and bank account. 

So I think they have a lot of out of date information so is identity fraud harder for them? I've activated the complimentary experian identity plus membership they gave us. Is there anything I can do to protect us.

Also what are my rights with regards Arnold Clark, is there some sort of compensation I can claim? Or do I have to suffer actual loss first? 

If you have not suffered any losses, what do you feel you should be compensated for?

the_lunatic_is_in_my_head

https://ico.org.uk/for-the-public/data-protection-and-journalism/taking-your-case-to-court-and-claiming-compensation/#:~:text=The GDPR gives you a,e.g. you have suffered distress).

Do I have to go to court to get compensation for a breach of data protection law?

The GDPR gives you a right to claim compensation from an organisation if you have suffered damage as a result of it breaking data protection law. This includes both “material damage” (e.g. you have lost money) or “non-material damage” (e.g. you have suffered distress).

The ICO cannot award compensation, even when we give our opinion that an organisation has broken data protection law.

You do not have to make a court claim to obtain compensation – the organisation may simply agree to pay it to you. However, if it does not agree to pay, your next step would be to make a claim in court. The court would decide your case. If it agreed with you, it would decide whether or not the organisation would have to pay you compensation.

We strongly recommend you take independent legal advice on the strength of your case before taking any claim to court.

The non-material damages would likely require something to affect you, other than general concern, to apply. If a company suffers a data breach they are likely to defend any individual claims strongly to avoid paying out to everyone who was affected. . 

Aylesbury_Duck said:

I'd change all passwords to your email, banking, and other accounts for a start.  Turn on MFA for any account that offers it, too.  Other than that, I wouldn't worry too much.

This is good advice and hopefully you won't have any negative affects from what happened  

Robbo66

DD92 said:

Some of you may or may not have heard about an Arnold clark data breach a couple of months ago (although they're only notifying me today). In an email they sent today they said that hackers have got their hands on unsigned copies of finance agreements from 2019 which they say may have contained name, address details, vehicle registration number, and bank account and sort code details. 

Both me and my then girlfriend, now wife, bought cars from them in 2019. What steps can I take to protect us. 

Since 2019 I've got a new address and no longer have that car, I have the same bank account but thinking about a current account switch. NI number I can't really do anything about. My wife since 2019 has a new surname, different address but same car and bank account. 

So I think they have a lot of out of date information so is identity fraud harder for them? I've activated the complimentary experian identity plus membership they gave us. Is there anything I can do to protect us.

Also what are my rights with regards Arnold Clark, is there some sort of compensation I can claim? Or do I have to suffer actual loss first? 

Register your details with CIFAS, cost £20 but the subscription last for 2 years

dld2s

My Letter says 2019 and earlier, not just 2019

Jenni_D

My other half bought a car from AC in 2019. We've not received any such communication as yet from AC. (Maybe our details weren't in the data breach, as we paid cash so there was no finance).

chanz4

DD92 said:

Some of you may or may not have heard about an Arnold clark data breach a couple of months ago (although they're only notifying me today). In an email they sent today they said that hackers have got their hands on unsigned copies of finance agreements from 2019 which they say may have contained name, address details, vehicle registration number, and bank account and sort code details. 

Both me and my then girlfriend, now wife, bought cars from them in 2019. What steps can I take to protect us. 

Since 2019 I've got a new address and no longer have that car, I have the same bank account but thinking about a current account switch. NI number I can't really do anything about. My wife since 2019 has a new surname, different address but same car and bank account. 

So I think they have a lot of out of date information so is identity fraud harder for them? I've activated the complimentary experian identity plus membership they gave us. Is there anything I can do to protect us.

Also what are my rights with regards Arnold Clark, is there some sort of compensation I can claim? Or do I have to suffer actual loss first? 

by taking their service, you have accepted an outcome

dyfsdoves

Hi all,  just wondering if anyone has any updates with this?  I am signed up with a solicitor but I am also aware that the ICO are investigating. 

eskbanker

dyfsdoves said:

Hi all,  just wondering if anyone has any updates with this?  I am signed up with a solicitor but I am also aware that the ICO are investigating. 

What sort of updates are you expecting?  They offered an identity protection service for anyone affected so no further action planned, or are you just hoping to find out if anyone experienced issues directly attributable to the breach?  Have you suffered any such loss?