Data Breach

stationhouse26

Not sure if this is the right thread but wasn't sure quite where to post this.

I have been advised today that the company that carried out my DBS check for work has had a data breach and they have obtained the following information:
Full name
Date of Birth
Address
Phone Number
Birth Town
NI Number
Driving License number
Passport Number

I'm slightly shocked they have got so much.

Obviously I will be monitoring all my accounts and being wary of any suspicious emails etc but is there anything else I should be doing?

With that amount of information being "out there" I would think I'm majorly at risk of Identity fraud. Should I be thinking of changing any information (goodness knows how) or putting some sort of alert on my credit file? Although I worried any sort of alert on my credit file might cause me problems in the future. 

I've read the various guidance about changing passwords and security etc but any other advice would be appreciated.

TIA

eskbanker

The DBS company ought to offer you a subscription to an identity protection service, available from the likes of Experian or CIFAS....

stationhouse26

Thanks eskbanker I'll enquire about that it seems like the least they should do.

Ergates

stationhouse26 said:

Not sure if this is the right thread but wasn't sure quite where to post this.

I have been advised today that the company that carried out my DBS check for work has had a data breach and they have obtained the following information:
Full name
Date of Birth
Address
Phone Number
Birth Town
NI Number
Driving License number
Passport Number

I'm slightly shocked they have got so much.

Obviously I will be monitoring all my accounts and being wary of any suspicious emails etc but is there anything else I should be doing?

With that amount of information being "out there" I would think I'm majorly at risk of Identity fraud. Should I be thinking of changing any information (goodness knows how) or putting some sort of alert on my credit file? Although I worried any sort of alert on my credit file might cause me problems in the future. 

I've read the various guidance about changing passwords and security etc but any other advice would be appreciated.

TIA

The data relating to you that will have been lost will likely be everything you gave them.   

So, whilst this *might* include all the data above, this might also just be a list of the different types of data they hold for different people.   i.e. If you didn't give them your passport number, they can't have lost it.

stationhouse26

Thanks Ergates, they did have all the above information and I have been told that is what has been "stolen"

Shakin_Steve

https://www.theregister.com/2025/08/22/apcs_breach/

stationhouse26

Shakin_Steve said:

https://www.theregister.com/2025/08/22/apcs_breach/

That's the one.

Shocking the information that has been taken.

stationhouse26

Just to add they have now confirmed what has been stolen.
Some colleagues who sent in information at the same time are unaffected.

flaneurs_lobster

Sign up for notifications of changes with the three credit reference agencies

https://www.moneysavingexpert.com/loans/check-free-credit-report/

You'd be looking for applications for loans or accounts that you didn't make.

If you get a paid-for identity protection service mentioned above, it should include this as a matter of course.

stationhouse26

Thanks Flanuers, I've checked my credit score via the credit club.

But I'm just worried that these various different agencies all operate separately and an identity fraud could slip through on one I've not checked.

I see you can register with cifas for two years for a reasonable sum.

Im surprised there's not one agency you can register with that covers all the bases in these circumstances.

Nasqueron

stationhouse26 said:

Thanks Flanuers, I've checked my credit score via the credit club.

But I'm just worried that these various different agencies all operate separately and an identity fraud could slip through on one I've not checked.

I see you can register with cifas for two years for a reasonable sum.

Im surprised there's not one agency you can register with that covers all the bases in these circumstances.

They are independent agencies, hence no one size fits all approach - that is where CIFAS protective marker comes in, the data breach firm should be paying for this