Scam?

Sube-likes-a-bargain

Received this formal looking letter today as did my husband. Have not actioned anything. Anyone else received anything like this lately? forma

grumbler

https://addressesandpostcodes.co.uk/address/kg1JXfsA/first-move-marketing-services-ltd-po-box-716-high-wycombe-hp11-1xt.html

https://www.firstmove.co.uk/contact/

Make the First Move to transform your business through direct mail marketing…

I'm tempted to rephrase:

Make the First Move to transform your business through direct mail …

NBLondon

Obvious question... Are you a customer of Cadwalader, Wickersham and Taft?  They are a US owned law firm but they do have London and Dublin offices.  Kroll is a real company which does provide the sort of services described.

The letter suggests you might be a customer of one of CWT's clients and it was the client's copy of your info that was breached - but in that case, shouldn't the client be contacting you?

If you Google the return address on the envelope it comes up as a marketing firm (and many others) but not a CWT office.  They might just have been used for the mailout but it looks like a dodgy sales gimmick to me.

cymruchris

There are multiple reports of the issue across many websites such as this one:

https://heimdalsecurity.com/blog/oldest-law-practice-in-nyc-hacked-over-90000-clients-impacted/

So the incident definitely took place.

Have you had any dealings with compensation claims over the last couple of years? Your letter seems to refer to this.

Kroll also appears to be a legitimate firm - although both they and CW&T appear to be American in base. On the face of it, it's likely genuine - but ask yourself if you can think of a way through some kind of interaction you've had with law firms, as to how they might have your personal details. 

Sube-likes-a-bargain

cymruchris said:

There are multiple reports of the issue across many websites such as this one:

https://heimdalsecurity.com/blog/oldest-law-practice-in-nyc-hacked-over-90000-clients-impacted/

So the incident definitely took place.

Have you had any dealings with compensation claims over the last couple of years? Your letter seems to refer to this.

Kroll also appears to be a legitimate firm - although both they and CW&T appear to be American in base. On the face of it, it's likely genuine - but ask yourself if you can think of a way through some kind of interaction you've had with law firms, as to how they might have your personal details. 

Only I have had a ppi claim a few years ago and nothing else. My husband has definitely not🤷🏻‍♀️

cymruchris

Sube-likes-a-bargain said:

cymruchris said:

There are multiple reports of the issue across many websites such as this one:

https://heimdalsecurity.com/blog/oldest-law-practice-in-nyc-hacked-over-90000-clients-impacted/

So the incident definitely took place.

Have you had any dealings with compensation claims over the last couple of years? Your letter seems to refer to this.

Kroll also appears to be a legitimate firm - although both they and CW&T appear to be American in base. On the face of it, it's likely genuine - but ask yourself if you can think of a way through some kind of interaction you've had with law firms, as to how they might have your personal details. 

Only I have had a ppi claim a few years ago and nothing else. My husband has definitely not🤷🏻‍♀️

As it has been written to you and not your husband - that might make sense.

At the end of the day it's highlighting an issue, and offering a monitoring service, it's not asking for money.

You don't have to take them up on their offer - but you should be alert that someone, somewhere might have your details, and so you should be extra vigilant over the next year to see if that data is used to your detriment.

Keep an eye for any 'applications' or 'new accounts' you've not opened.

There would have been a very large file of data taken I'm sure for this kind of response to be offered. We don't know exactly the data taken - but if for example it included how much compensation was paid - I'd imagine they'd be 'targetting' those with the biggest payouts. (But this is just a bit of guesswork).

MalMonroe

cymruchris said:

Sube-likes-a-bargain said:

cymruchris said:

There are multiple reports of the issue across many websites such as this one:

https://heimdalsecurity.com/blog/oldest-law-practice-in-nyc-hacked-over-90000-clients-impacted/

So the incident definitely took place.

Have you had any dealings with compensation claims over the last couple of years? Your letter seems to refer to this.

Kroll also appears to be a legitimate firm - although both they and CW&T appear to be American in base. On the face of it, it's likely genuine - but ask yourself if you can think of a way through some kind of interaction you've had with law firms, as to how they might have your personal details. 

Only I have had a ppi claim a few years ago and nothing else. My husband has definitely not🤷🏻‍♀️

As it has been written to you and not your husband - that might make sense.

At the end of the day it's highlighting an issue, and offering a monitoring service, it's not asking for money.

You don't have to take them up on their offer - but you should be alert that someone, somewhere might have your details, and so you should be extra vigilant over the next year to see if that data is used to your detriment.

Keep an eye for any 'applications' or 'new accounts' you've not opened.

There would have been a very large file of data taken I'm sure for this kind of response to be offered. We don't know exactly the data taken - but if for example it included how much compensation was paid - I'd imagine they'd be 'targetting' those with the biggest payouts. (But this is just a bit of guesswork).

OP said it was written to her husband as well "Received this formal looking letter today as did my husband."

cymruchris

MalMonroe said:

cymruchris said:

Sube-likes-a-bargain said:

cymruchris said:

There are multiple reports of the issue across many websites such as this one:

https://heimdalsecurity.com/blog/oldest-law-practice-in-nyc-hacked-over-90000-clients-impacted/

So the incident definitely took place.

Have you had any dealings with compensation claims over the last couple of years? Your letter seems to refer to this.

Kroll also appears to be a legitimate firm - although both they and CW&T appear to be American in base. On the face of it, it's likely genuine - but ask yourself if you can think of a way through some kind of interaction you've had with law firms, as to how they might have your personal details. 

Only I have had a ppi claim a few years ago and nothing else. My husband has definitely not🤷🏻‍♀️

As it has been written to you and not your husband - that might make sense.

At the end of the day it's highlighting an issue, and offering a monitoring service, it's not asking for money.

You don't have to take them up on their offer - but you should be alert that someone, somewhere might have your details, and so you should be extra vigilant over the next year to see if that data is used to your detriment.

Keep an eye for any 'applications' or 'new accounts' you've not opened.

There would have been a very large file of data taken I'm sure for this kind of response to be offered. We don't know exactly the data taken - but if for example it included how much compensation was paid - I'd imagine they'd be 'targetting' those with the biggest payouts. (But this is just a bit of guesswork).

OP said it was written to her husband as well "Received this formal looking letter today as did my husband."

Missed that - although same advice applies. Keep a careful watch on the CRA reports over the next year.

Realistically these data leaks happen frequently - and I'm sure many don't get reported. You can 'buy' personal information on the dark web fairly easily if you know what you're doing. It's a risk for all of us who have given any financial details to any company (and the majority of us have bought something with a debit card or a credit card online). Yes there are systems in place designed to protect the data - but there are also clever people out there who know how to get around them.

MalMonroe

After the Equifax data was hacked in the US (can't remember when exactly), I received a very similar letter.

With a very similar message. And an invitation to receive two years monitoring, as you have received.

I knew that the hacking had occurred but wasn't sure, even so, that the letter I received was genuine. 

I was also offered two free years of identity monitoring if I responded by a certain date. 

I didn't respond because they assured me, as they have assured you, that no vital information was stolen. And nothing happened. No-one accessed anything of mine at any time. If they did, good luck to them (hope they enjoyed it) but to date I haven't lost any money. And nothing horrible happened as a result of my not doing what they offered by a certain date. I don't react well to scaremongering or deadlines.

The only thing I did do was tighten up my online security, changed passwords on all my internet accounts - something I do as a matter of course now anyway. I also do that on my phone, just in case.

I'm not saying that you should do the same as me but even though the companies involved may be legitimate, the letters purportedly coming from them may not be. Sometimes even when people phone to check, telephone numbers have been cloned. My first instinct now is always 'scam' - and then I investigate further. If I'm in doubt, I don't. It'd be nice to be able to trust what people say but sadly I don't. 

This is just my own experience, obviously. On this forum you're advised to check, check again and verify for yourself. Please do.

Sube-likes-a-bargain

MalMonroe said:

After the Equifax data was hacked in the US (can't remember when exactly), I received a very similar letter.

With a very similar message. And an invitation to receive two years monitoring, as you have received.

I knew that the hacking had occurred but wasn't sure, even so, that the letter I received was genuine. 

I was also offered two free years of identity monitoring if I responded by a certain date. 

I didn't respond because they assured me, as they have assured you, that no vital information was stolen. And nothing happened. No-one accessed anything of mine at any time. If they did, good luck to them (hope they enjoyed it) but to date I haven't lost any money. And nothing horrible happened as a result of my not doing what they offered by a certain date. I don't react well to scaremongering or deadlines.

The only thing I did do was tighten up my online security, changed passwords on all my internet accounts - something I do as a matter of course now anyway. I also do that on my phone, just in case.

I'm not saying that you should do the same as me but even though the companies involved may be legitimate, the letters purportedly coming from them may not be. Sometimes even when people phone to check, telephone numbers have been cloned. My first instinct now is always 'scam' - and then I investigate further. If I'm in doubt, I don't. It'd be nice to be able to trust what people say but sadly I don't. 

This is just my own experience, obviously. On this forum you're advised to check, check again and verify for yourself. Please do.

I am exactly the same if I get letters,emails or messages especially if I am not expecting them my first thought is 'scam'. Just wanted to put the feelers out on here for advice. I always keep a close eye on my accounts but will be extra vigilant over the next year. No big amounts in them anyway! 😕

Shakin_Steve

cymruchris said:

MalMonroe said:

cymruchris said:

Sube-likes-a-bargain said:

cymruchris said:

There are multiple reports of the issue across many websites such as this one:

https://heimdalsecurity.com/blog/oldest-law-practice-in-nyc-hacked-over-90000-clients-impacted/

So the incident definitely took place.

Have you had any dealings with compensation claims over the last couple of years? Your letter seems to refer to this.

Kroll also appears to be a legitimate firm - although both they and CW&T appear to be American in base. On the face of it, it's likely genuine - but ask yourself if you can think of a way through some kind of interaction you've had with law firms, as to how they might have your personal details. 

Only I have had a ppi claim a few years ago and nothing else. My husband has definitely not🤷🏻‍♀️

As it has been written to you and not your husband - that might make sense.

At the end of the day it's highlighting an issue, and offering a monitoring service, it's not asking for money.

You don't have to take them up on their offer - but you should be alert that someone, somewhere might have your details, and so you should be extra vigilant over the next year to see if that data is used to your detriment.

Keep an eye for any 'applications' or 'new accounts' you've not opened.

There would have been a very large file of data taken I'm sure for this kind of response to be offered. We don't know exactly the data taken - but if for example it included how much compensation was paid - I'd imagine they'd be 'targetting' those with the biggest payouts. (But this is just a bit of guesswork).

OP said it was written to her husband as well "Received this formal looking letter today as did my husband."

Missed that - although same advice applies. Keep a careful watch on the CRA reports over the next year.

Realistically these data leaks happen frequently - and I'm sure many don't get reported. You can 'buy' personal information on the dark web fairly easily if you know what you're doing. It's a risk for all of us who have given any financial details to any company (and the majority of us have bought something with a debit card or a credit card online). Yes there are systems in place designed to protect the data - but there are also clever people out there who know how to get around them.

I think it's best to always assume that your details are 'out there'. News of a breach at Capita this week and, although the company are not saying anything about what information was taken, details of some people's bank accounts have appeared on the dark web, according to the Times newspaper.
I assume most of us on here pay for a tv license and, as Capita run this service, they will hold all of those bank details. This is why banks have to try their utmost to make sure the person logging on to their account is who they say they are. Hence the security measures that so many complain about. Never take any text, email or phone call at face value. Sad but true.