Arnold clark data breach

Some of you may or may not have heard about an Arnold clark data breach a couple of months ago (although they're only notifying me today). In an email they sent today they said that hackers have got their hands on unsigned copies of finance agreements from 2019 which they say may have contained name, address details, vehicle registration number, and bank account and sort code details. 

Both me and my then girlfriend, now wife, bought cars from them in 2019. What steps can I take to protect us. 

Since 2019 I've got a new address and no longer have that car, I have the same bank account but thinking about a current account switch. NI number I can't really do anything about. My wife since 2019 has a new surname, different address but same car and bank account. 

So I think they have a lot of out of date information so is identity fraud harder for them? I've activated the complimentary experian identity plus membership they gave us. Is there anything I can do to protect us.

Also what are my rights with regards Arnold Clark, is there some sort of compensation I can claim? Or do I have to suffer actual loss first? 
«1

Comments

  • I'd change all passwords to your email, banking, and other accounts for a start.  Turn on MFA for any account that offers it, too.  Other than that, I wouldn't worry too much.

    In theory, yes, you need to have losses to go for compensation.  Don't get sucked into ambulance-chasing type lawyers offering riches on social media.
  • DD92 said:
    Some of you may or may not have heard about an Arnold clark data breach a couple of months ago (although they're only notifying me today). In an email they sent today they said that hackers have got their hands on unsigned copies of finance agreements from 2019 which they say may have contained name, address details, vehicle registration number, and bank account and sort code details. 

    Both me and my then girlfriend, now wife, bought cars from them in 2019. What steps can I take to protect us. 

    Since 2019 I've got a new address and no longer have that car, I have the same bank account but thinking about a current account switch. NI number I can't really do anything about. My wife since 2019 has a new surname, different address but same car and bank account. 

    So I think they have a lot of out of date information so is identity fraud harder for them? I've activated the complimentary experian identity plus membership they gave us. Is there anything I can do to protect us.

    Also what are my rights with regards Arnold Clark, is there some sort of compensation I can claim? Or do I have to suffer actual loss first? 
    You've answered your own question there, as it stands you have no loss to be compensated for.  
  • DD92 said:
    Some of you may or may not have heard about an Arnold clark data breach a couple of months ago (although they're only notifying me today). In an email they sent today they said that hackers have got their hands on unsigned copies of finance agreements from 2019 which they say may have contained name, address details, vehicle registration number, and bank account and sort code details. 

    Both me and my then girlfriend, now wife, bought cars from them in 2019. What steps can I take to protect us. 
    You do not really need to do anything, although keeping an eye on your credit cards would be advisable, it is advisable on an ongoing basis anyway.
    DD92 said:
    Since 2019 I've got a new address and no longer have that car, I have the same bank account but thinking about a current account switch. NI number I can't really do anything about. My wife since 2019 has a new surname, different address but same car and bank account. 

    So I think they have a lot of out of date information so is identity fraud harder for them? I've activated the complimentary experian identity plus membership they gave us. Is there anything I can do to protect us.

    Also what are my rights with regards Arnold Clark, is there some sort of compensation I can claim? Or do I have to suffer actual loss first? 
    If you have not suffered any losses, what do you feel you should be compensated for?
  • https://ico.org.uk/for-the-public/data-protection-and-journalism/taking-your-case-to-court-and-claiming-compensation/#:~:text=The GDPR gives you a,e.g. you have suffered distress).

    Do I have to go to court to get compensation for a breach of data protection law?

    The GDPR gives you a right to claim compensation from an organisation if you have suffered damage as a result of it breaking data protection law. This includes both “material damage” (e.g. you have lost money) or “non-material damage” (e.g. you have suffered distress).

    The ICO cannot award compensation, even when we give our opinion that an organisation has broken data protection law.

    You do not have to make a court claim to obtain compensation – the organisation may simply agree to pay it to you. However, if it does not agree to pay, your next step would be to make a claim in court. The court would decide your case. If it agreed with you, it would decide whether or not the organisation would have to pay you compensation.

    We strongly recommend you take independent legal advice on the strength of your case before taking any claim to court.


    The non-material damages would likely require something to affect you, other than general concern, to apply. If a company suffers a data breach they are likely to defend any individual claims strongly to avoid paying out to everyone who was affected. . 

    I'd change all passwords to your email, banking, and other accounts for a start.  Turn on MFA for any account that offers it, too.  Other than that, I wouldn't worry too much.


    This is good advice and hopefully you won't have any negative affects from what happened :) 

  • Robbo66
    Robbo66 Posts: 473
    First Anniversary First Post Name Dropper
    Forumite
    DD92 said:
    Some of you may or may not have heard about an Arnold clark data breach a couple of months ago (although they're only notifying me today). In an email they sent today they said that hackers have got their hands on unsigned copies of finance agreements from 2019 which they say may have contained name, address details, vehicle registration number, and bank account and sort code details. 

    Both me and my then girlfriend, now wife, bought cars from them in 2019. What steps can I take to protect us. 

    Since 2019 I've got a new address and no longer have that car, I have the same bank account but thinking about a current account switch. NI number I can't really do anything about. My wife since 2019 has a new surname, different address but same car and bank account. 

    So I think they have a lot of out of date information so is identity fraud harder for them? I've activated the complimentary experian identity plus membership they gave us. Is there anything I can do to protect us.

    Also what are my rights with regards Arnold Clark, is there some sort of compensation I can claim? Or do I have to suffer actual loss first? 
    Register your details with CIFAS, cost £20 but the subscription last for 2 years
  • dld2s
    dld2s Posts: 441
    First Anniversary Combo Breaker First Post Uniform Washer
    Forumite
    My Letter says 2019 and earlier, not just 2019
  • Jenni_D
    Jenni_D Posts: 5,059
    First Anniversary First Post Name Dropper Photogenic
    Forumite
    edited 23 February 2023 at 7:36PM
    My other half bought a car from AC in 2019. We've not received any such communication as yet from AC. (Maybe our details weren't in the data breach, as we paid cash so there was no finance).
    Jenni x
  • chanz4
    chanz4 Posts: 10,846
    First Anniversary Name Dropper First Post Xmas Saver!
    Forumite
    DD92 said:
    Some of you may or may not have heard about an Arnold clark data breach a couple of months ago (although they're only notifying me today). In an email they sent today they said that hackers have got their hands on unsigned copies of finance agreements from 2019 which they say may have contained name, address details, vehicle registration number, and bank account and sort code details. 

    Both me and my then girlfriend, now wife, bought cars from them in 2019. What steps can I take to protect us. 

    Since 2019 I've got a new address and no longer have that car, I have the same bank account but thinking about a current account switch. NI number I can't really do anything about. My wife since 2019 has a new surname, different address but same car and bank account. 

    So I think they have a lot of out of date information so is identity fraud harder for them? I've activated the complimentary experian identity plus membership they gave us. Is there anything I can do to protect us.

    Also what are my rights with regards Arnold Clark, is there some sort of compensation I can claim? Or do I have to suffer actual loss first? 
    by taking their service, you have accepted an outcome
    Don't put your trust into an Experian score - it is not a number any bank will ever use & it is generally a waste of money to purchase it. They are also selling you insurance you dont need.
  • Hi all,  just wondering if anyone has any updates with this?  I am signed up with a solicitor but I am also aware that the ICO are investigating. 
  • eskbanker
    eskbanker Posts: 29,811
    First Anniversary Name Dropper Photogenic First Post
    Forumite
    dyfsdoves said:
    Hi all,  just wondering if anyone has any updates with this?  I am signed up with a solicitor but I am also aware that the ICO are investigating. 
    What sort of updates are you expecting?  They offered an identity protection service for anyone affected so no further action planned, or are you just hoping to find out if anyone experienced issues directly attributable to the breach?  Have you suffered any such loss?
Meet your Ambassadors

Categories

  • All Categories
  • 341.6K Banking & Borrowing
  • 249.6K Reduce Debt & Boost Income
  • 449K Spending & Discounts
  • 233.6K Work, Benefits & Business
  • 605.9K Mortgages, Homes & Bills
  • 172.4K Life & Family
  • 246.7K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 15.8K Discuss & Feedback
  • 15.1K Coronavirus Support Boards