Scam?

TheBanker

I don't think the US case directly affects you as such. The letter you've had is to warn you that your data has been lost and offer the identity protection service provided by a third party as a way of helping to protect you from any harm arising.

The US class action is an attempt to obtain compensation for those who were affected through the US courts. I'm not sure whether any compensation award would cover non-US residents, how much it would be or how it would be distributed. I guess someone could try to bring a similar case through the UK courts on behalf of UK residents but it would be expensive. To be honest I wouldn't worry about compensation, I'd just want to understand what had been lost so I could protect myself if necessary.

Personally I would not use their third party service but would make my own arrangements to monitor my credit file (if you don't already).

At the bank I work for, when we become aware of a customer's data being involved in a breach we advise a CIFAS protective registration marker which costs £25 per year. The customer has to arrange this themselves. In the unlikely event that we caused the breach we will cover the cost as part of the compensation we pay. 

Eld1985

TheBanker said:

I don't think the US case directly affects you as such. The letter you've had is to warn you that your data has been lost and offer the identity protection service provided by a third party as a way of helping to protect you from any harm arising.

The US class action is an attempt to obtain compensation for those who were affected through the US courts. I'm not sure whether any compensation award would cover non-US residents, how much it would be or how it would be distributed. I guess someone could try to bring a similar case through the UK courts on behalf of UK residents but it would be expensive. To be honest I wouldn't worry about compensation, I'd just want to understand what had been lost so I could protect myself if necessary.

Personally I would not use their third party service but would make my own arrangements to monitor my credit file (if you don't already).

At the bank I work for, when we become aware of a customer's data being involved in a breach we advise a CIFAS protective registration marker which costs £25 per year. The customer has to arrange this themselves. In the unlikely event that we caused the breach we will cover the cost as part of the compensation we pay. 

Helpful, thanks. 
Guess it depends if we are included in the 90k effected or solely US residents. No idea.

I will await contact from Cadwalader to know exactly what information of ours 'is out there' and where from etc. It is shocking it took this long to notify us, just what the case filing says.
Done some checks and so far OK.

Chamira

I received this letter today, posted on 31st March from the UK.

I am living in Sri Lanka and I had a Bradford & Bingley / Mortage Express mortgage on a property in the UK when I was living there. Mortgage Express has since been sold on to another mortgage company.

This looks like the law firm is going through the basic requirements it needs to do after the data breach was identified.

Or, the the people who stole the data, have my details and are now embarking on an elaborate scam.

Twopenneth

I received two of these letters addressed to two versions of my name (and two different activation codes), which is what picqued my suspicions. However, mentions earlier on MSE of Bradford and Bingley, Mortgage Express and now Siberte Mortgages in relation to buy-to let properties in the UK has direct relevance to me. I suspect that's the connection so I'll be treating this as legit until I learn otherwise.

Conman12

I received a letter which stated that my data had been acquired including my political affiliation. Subsequent to this I sent the law firm a DSAR and received a response which stated that they have not processed my political affiliation and that all what was acquired was my name, address, mobile, and email address, the latter two are out of date by circa 14 years.

According to their response my data was included in documents containing legal advice they gave to a client. 

I have now submitted a complaint to the ICO has they have not provided an adequate response and are/were unlawfully processing my data.