Capita - Hacked

Doctor_Who

LHW99 said:

Interesting. My OH has had the USS activation code, and appears to have set things up satisfactorily (no payment requested), but as far as I remember from watching the process, this step was actually your step 4.

Time will tell I suppose.

Was this your OH's first application for the Experian Identity Plus service? I can't remember what the order was when I first signed up, apart from the fact that the complimentary free service was not included. The above process was my second sign up and fixed the issue. My brother (also USS) had no problems signing up the first time. I thought it was 'just me', but then read tooldle's post above. 

LHW99

Doctor_Who said:

LHW99 said:

Interesting. My OH has had the USS activation code, and appears to have set things up satisfactorily (no payment requested), but as far as I remember from watching the process, this step was actually your step 4.

Time will tell I suppose.

Was this your OH's first application for the Experian Identity Plus service? I can't remember what the order was when I first signed up, apart from the fact that the complimentary free service was not included. The above process was my second sign up and fixed the issue. My brother (also USS) had no problems signing up the first time. I thought it was 'just me', but then read tooldle's post above. 

Ah yes, first time signing up, that would explain it.

tooldle

Doctor_Who said:

tooldle said:

I’ve had the same offer (USS) and an activation code has been provided. Unfortunately the subsequently created account, does  not have the promised free access to Experian ID Plus so now, that needs sorting. What a palaver.

Exactly the same happened when I tried to activate the USS provided free Experian Identity Plus service. I contacted Experian, who could not resolve the problem their end, but asked me to follow the steps below, which fixed the issue. Basically just follow the original sign up process, but when the system recognises you already have an account then follow the login instructions, all should then be correct.

 - Please click on the link provided here - https://identity.experian.co.uk/get-started/protection
 - Enter your promotional code and select 'get started'
 - Enter your details
 - The system may recognise you and provide you with a 'login' hyperlink - please select this.
 - Once you are logged in you should be presented with a page that indicates "you're changing to a complimentary Identity Plus subscription"
 - At the bottom of that page please click on 'Redeem activation code'

Thanks, Experian got back to me with the same advice. All sorted now. My OH had no issues in setting his account up, odd as the steps are the same. 

tooldle

If it has any bearing, my application was ‘selected’ for additional security checks. Perhaps that is where things went wrong.

LHW99

And yet another hack. Could some of these companies been hit twice??

https://www.bbc.co.uk/news/technology-65829726

TywysogLloegr

In case anyone was wondering, the data exfiltrated :-

Address, date of birth, email address, employment details and history, gender, HMRC data, location data, marital status, name, national insurance number, area postcode, postcode, spouse details, pension amounts and history, salary and sexuality. 

No worries there then. Thinking that one year of Experian does not quite cut it.

Asimovs_nightfall

TywysogLloegr said:

In case anyone was wondering, the data exfiltrated :-

Address, date of birth, email address, employment details and history, gender, HMRC data, location data, marital status, name, national insurance number, area postcode, postcode, spouse details, pension amounts and history, salary and sexuality. 

No worries there then. Thinking that one year of Experian does not quite cut it.

Appalling. I know there was talk of a class action, but really I wonder what, in the case of USS, they and the UCU are doing to ensure Capita realise their responsibility and provide adequate protection, other than the limited Experian offer. 

p00hsticks

TywysogLloegr said:

In case anyone was wondering, the data exfiltrated :-

Address, date of birth, email address, employment details and history, gender, HMRC data, location data, marital status, name, national insurance number, area postcode, postcode, spouse details, pension amounts and history, salary and sexuality. 

No worries there then. Thinking that one year of Experian does not quite cut it.

I can't ever recall having to ever tell any of my pension providers anything about my sexuality, and I can't see any reason why they would need to know it. 
Gender - yes. Sexuality - no.   

Regardless of being hacked, I'd be querying why they felt they needed to be asking and storing that sort of information on the first place. 

Squirrel773

Just received my lovely letter yesterday, everything taken, Sleepless night. 

So I have contacted everyone and everything so far, all were very quick to respond.
DVLA,
DWP.
Passport office.
Banks were useless because nothing has happened yet.

Signed up for ICO, Information Commissioners office,
CIFAS.
Action Fraud were useful.

Makes sure you restrict you deeds on your property,Land Registry.

Also contacted Leigh day Solicitors to see if they are doing anything about this.

TywysogLloegr

I have seen the sexuality question on a form. Not something I would answer.  But losing data on sexuality might be a very dangerous thing for a pensioner living in a country where some things are illegal. Liability for Capita for someone being blackmailed or worse?