Southern Water - Data breach

lostmyname

I’ve been notified by Southern Water that they have been targeted by a cyber attack and my data (along with others) has been compromised.

I can understand they would have my name and address on record, as well as my bank details, but what puzzles me is that they also mentioned my NIN and DOB, if they were provided.

Now, I’ve had this account several years so can’t remember if I supplied those, but beside the point, why would they need this information at all?

What actions should I now take to protect myself from further possible ID fraud?

Other than giving me a free 1 year subscription with Experian, they have not given any other advice.

Thank you 

Browntoa

I did wonder if it was a badly drawn up letter , possibly employees or contractors details also compromised, Which would explain the NI number and DOB .

I'm with you, I don't think I supplied that data .

Make sure you have 2FA authenticator turned on for your banking etc as it will warn you of attempted bank fraud 

solly26

I have had the same notification of a cyber attack by Southern Water. Are there any downsides to accepting their offer of a free 1 year subscription with Experian? Will it have any effect on renewing my mortgage? Will I be pressured into renewing this service after the free year? I make it a rule not to accept free trials of anything as it can be complicated to cancel these services. Is it not possible that Southern Water is just drumming up business for Experian. I hate to be so cynical but modern life has made me very distrustful of anything “free”.

newatc

I had a free Experian subscription in similar circumstances, there were no downsides. I can't remember how long the term was meant to be  but I recall it went on for much longer before Experian closed it.

MagnaG

I have had the same notification, do I have to Notify my Bank about this ? Has any on had the Experian experience  ?Thanks in advance .

specialpatrolgroup

I too have had the email and the letter from Britains worst water company. I am distrustful of the "experian offer" and insulted by the cybersecurity advice particularly "Be suspicious of anyone who asks for your bank account or credit card details" , as their data breach has already released those details on to the dark web on behalf of all its customers. There is also no contact number for worried elderly customers who don't have the internet or are unable to take up the 'offer' of Experian or would struggle to understand the implications. This water company is not fit for purpose , they prioritise shareholder dividends over everything , they over charge , don't fix leaks, pollute the rivers and now give our details away to hackers with their insufficient website / data security. I wont be signing up for Experian so they can harass me by text and email too , I might stop paying the bill electronically altogether and go back to paying it in cash at a post office like i used to in the 1980's . 

Smileyman

I am a victim here too. Has anyone any news about a possible class action for compensation against Southern Water? If so please post details so others may participate! 

lostmyname

specialpatrolgroup said:

I too have had the email and the letter from Britains worst water company. I am distrustful of the "experian offer" and insulted by the cybersecurity advice particularly "Be suspicious of anyone who asks for your bank account or credit card details" , as their data breach has already released those details on to the dark web on behalf of all its customers. There is also no contact number for worried elderly customers who don't have the internet or are unable to take up the 'offer' of Experian or would struggle to understand the implications. This water company is not fit for purpose , they prioritise shareholder dividends over everything , they over charge , don't fix leaks, pollute the rivers and now give our details away to hackers with their insufficient website / data security. I wont be signing up for Experian so they can harass me by text and email too , I might stop paying the bill electronically altogether and go back to paying it in cash at a post office like i used to in the 1980's . 

@specialpatrolgroup you make very valid points there. I can't believe they just dropped the bombshell and offered no support whatsoever with dealing with the repercussions of THEIR FAILURE to keep our data safe.
With our details, name, address, bank, NINO, they have handed out enough information, on a plate, to carry out identity theft and fraud! 
I am speechless I hope @martinlewis gets wind of this post and addresses it.

lostmyname

Smileyman said:

I am a victim here too. Has anyone any news about a possible class action for compensation against Southern Water? If so please post details so others may participate! 

Jilldu said:

I have had the same notification, do I have to Notify my Bank about this ? Has any on had the Experian experience  ?Thanks in advance .

I'm sorry I have no advice to offer, I hope someone can jump into the thread and help us out!

cressglas

I note that the attack happened on 22nd January and yet they didn't notify us until the 22nd February (approx) and I would welcome any informed advice on any precautions or indeed class action we should take, not content with not protecting our water they seem to be unable to protect our data. 

MattMattMattUK

There is no such thing as "class action" in the UK.
There is no right to compensation unless you suffer quantifiable financial loss.
For the vast majority of people the data stolen was name, address, email, phone number and bank account details, that realistically that presents zero risk. For some who had submitted NI numbers and DoB the risk is marginally higher, but those appear to be employees not customers.
The Experian Monitoring option will let people keep an eye on any searches and applications in near real time, that could be reassuring for those people but not really needed.
Anyone whose data was part of this just needs to carry on as normal, doing the usual things of being aware of scam calls and emails and occasionally checking inon their credit report.