Capita - Hacked

RSTime

Umiamz said:

USS haven't offered anything other than apologies.

They provided a subscription to Experian Identity Check for a year (received an email this week). Am still furious given the data that has been stolen, will be a concern and risk for the foreseeable future…

RSTime

BoyJohn811 said:

I have also received an email from USS that pretty much all of my presonal details were stolen by hackers (title, initial(s), and name, your date of birth, your National Insurance number, your USS member number and your retirement date). Unfortunately, these are permanently linked to a specific person, not something we can change like a password. Since digital data can be traded unlimited times, this can get back to me even in 10 years time - none of my personal details can be changed.

I am guessing the danger is not really losing money directly from my bank account (strong password, 2FA, checking accounts regularly, common sense, etc.), rather, it is the fact that a hacker can use my details for any survice they wish to sign up for (e.g., credit application or any other online application that uses identity theft) and I would not even know about it.

I was also offered a complementary 1 years account with Experian. I have never taken any credit in my life (not even credit card) and have very strong online protection (password managers, 2FA, hardware security keys, etc.); however, I cannot change my national insurance number or birthdate.

Would anyone have recommendations on what else I can do to protect myself? Is it possible, for example, to block all new applications (e.g., credit applications) in my name?

I share your concerns (as a deferred USS member). My understanding of Experian Identity Check is that you can block credit applications, however, I wonder if this could become a nuisance as credit card companies and others routinely make low level checks and if these are blocked could they result in issues?

RSTime

corky23 said:

https://www.experian.com/blogs/ask-experian/credit-education/preventing-fraud/security-freeze/   

Boyjohn - you can freeze your credit score - see above. I've been hacked as well so not only will I be doing that but going to a lawyer, as data breaches, which cause distress but no financial loss, still requires a settlement.

I was annoyed when my provider moved the pension administration from an internal group company to Capita, given all the known issues with Capita and knowing that the only reason the move was taking place was "cost cutting." 

I understand that a couple of companies are looking at a group action. Be helpful, if you are able to share any legal advice…

frugalfran

It seems there is little any individual can do, other than the great advice from Banker. But pension trustees could be put under pressure to take back pension schemes admin to in-house at AGMs.

frugalfran

... But the words 'horse's and 'stable food's so come to mind!

TheBanker

RSTime said:

BoyJohn811 said:

I have also received an email from USS that pretty much all of my presonal details were stolen by hackers (title, initial(s), and name, your date of birth, your National Insurance number, your USS member number and your retirement date). Unfortunately, these are permanently linked to a specific person, not something we can change like a password. Since digital data can be traded unlimited times, this can get back to me even in 10 years time - none of my personal details can be changed.

I am guessing the danger is not really losing money directly from my bank account (strong password, 2FA, checking accounts regularly, common sense, etc.), rather, it is the fact that a hacker can use my details for any survice they wish to sign up for (e.g., credit application or any other online application that uses identity theft) and I would not even know about it.

I was also offered a complementary 1 years account with Experian. I have never taken any credit in my life (not even credit card) and have very strong online protection (password managers, 2FA, hardware security keys, etc.); however, I cannot change my national insurance number or birthdate.

Would anyone have recommendations on what else I can do to protect myself? Is it possible, for example, to block all new applications (e.g., credit applications) in my name?

I share your concerns (as a deferred USS member). My understanding of Experian Identity Check is that you can block credit applications, however, I wonder if this could become a nuisance as credit card companies and others routinely make low level checks and if these are blocked could they result in issues?

It shouldn't, they are not the same type of check as an application. 

I'm not sure I'd want applications blocked though - it would be a pain when I really want to apply for a new account. I'd rather just get the email that tells me someone's run a search. Then I can contact them if it's anything untoward.

flaneurs_lobster

frugalfran said:

It seems there is little any individual can do, other than the great advice from Banker. But pension trustees could be put under pressure to take back pension schemes admin to in-house at AGMs.

Agreed, the advice given by @TheBanker is first class.

Having been forced to deal with this company as a customer, supplier, employee and now as an unwilling user of their pension and local authority administration I now think it's payback. Sign me up for all the class actions going. 

Their claws are so far into central and local government that I fear trying to remove them will cause too much damage and disruption for the decision makers to countenance. 

corky23

RSTime said:

corky23 said:

https://www.experian.com/blogs/ask-experian/credit-education/preventing-fraud/security-freeze/   

Boyjohn - you can freeze your credit score - see above. I've been hacked as well so not only will I be doing that but going to a lawyer, as data breaches, which cause distress but no financial loss, still requires a settlement.

I was annoyed when my provider moved the pension administration from an internal group company to Capita, given all the known issues with Capita and knowing that the only reason the move was taking place was "cost cutting." 

I understand that a couple of companies are looking at a group action. Be helpful, if you are able to share any legal advice…

Here you go.  You don't have to have lost out due to the breach. This is the firm I've contacted 

https://data-breach.com/capita-data-breach-compensation/

Umiamz

corky23 said:

RSTime said:

corky23 said:

https://www.experian.com/blogs/ask-experian/credit-education/preventing-fraud/security-freeze/   

Boyjohn - you can freeze your credit score - see above. I've been hacked as well so not only will I be doing that but going to a lawyer, as data breaches, which cause distress but no financial loss, still requires a settlement.

I was annoyed when my provider moved the pension administration from an internal group company to Capita, given all the known issues with Capita and knowing that the only reason the move was taking place was "cost cutting." 

I understand that a couple of companies are looking at a group action. Be helpful, if you are able to share any legal advice…

Here you go.  You don't have to have lost out due to the breach. This is the firm I've contacted 

https://data-breach.com/capita-data-breach-compensation/

Rather amateurish website and I can’t find them on TrustPilot, despite them quoting all their 5-star reviews. I’m always very wary of these no win, no fee outfits…

corky23

Umiamz said:

corky23 said:

RSTime said:

corky23 said:

https://www.experian.com/blogs/ask-experian/credit-education/preventing-fraud/security-freeze/   

Boyjohn - you can freeze your credit score - see above. I've been hacked as well so not only will I be doing that but going to a lawyer, as data breaches, which cause distress but no financial loss, still requires a settlement.

I was annoyed when my provider moved the pension administration from an internal group company to Capita, given all the known issues with Capita and knowing that the only reason the move was taking place was "cost cutting." 

I understand that a couple of companies are looking at a group action. Be helpful, if you are able to share any legal advice…

Here you go.  You don't have to have lost out due to the breach. This is the firm I've contacted 

https://data-breach.com/capita-data-breach-compensation/

Rather amateurish website and I can’t find them on TrustPilot, despite them quoting all their 5-star reviews. I’m always very wary of these no win, no fee outfits…

Thank you Umiamz - if you find any other more reliable legal firm then let us know.