Can someone else have my own car repaired on my insurance.

flaneurs_lobster

But a person turning up at the glass repairer's site in a borrowed car and getting them to do a repair against the owner's insurance unbeknownst to the policyholder seems not quite right.

But this is 'car trade' people dealing with other 'car trade' people - whole different set of norms & rules.

born_again

https://forums.moneysavingexpert.com/discussion/comment/82103112#Comment_82103112

Is it?

Clearly this 3rd party had enough detail to get through security. Thus no data breach, as far as ins co go, they were speaking to their customer.

paul_c123

https://forums.moneysavingexpert.com/discussion/comment/82104053#Comment_82104053

Whether a third party can "get through security" isn't a factor in determining if a data breach occurred. If they're taking to anyone other than the customer about the product they have (even revealing if they have a product or not, eg windscreen cover) is a data breach. If they can get through security, then it shows there is a flaw of some kind in the checks they make. All the more so if they've taken action or instructions based on that breach.

born_again

https://forums.moneysavingexpert.com/discussion/comment/82104083#Comment_82104083

 then it shows there is a flaw of some kind in the checks they make.

Or the customer has shared the details?

paul_c123

Looking back at the OP, he says they were able to "impersonate" him and progress a claim by getting through security only with the name and address. That's a pretty low bar for "security" and wholly within the responsibility of the insurance company if they can get through with only those details.

100% its a data breach.

LightFlare

what details would an ins company hold on a person that a really good friend didn’t know ?

Or are you suggesting that ins companies start setting up passwords and secret phrases to ensure the person they are speaking to is the actual customer ? (Not necessarily a bad thing in this day and age)

flaneurs_lobster

https://forums.moneysavingexpert.com/discussion/comment/82104393#Comment_82104393

Would take that as a given for any company that holds the kind of personal data that is required to insure a car (or anything else) and often details of bank accounts/cards for payments. It's no more than you need to get into your Tesco Clubcard account!

The quirk in the OP is that both parties were insured with the same company - I reckon it's just a shonky procedure and a couple of assumptions by a call handler that have put this claim against the wrong account.

Mildly_Miffed

"The quirk in the OP is that both parties were insured with the same company - I reckon it's just a shonky procedure and a couple of assumptions by a call handler that have put this claim against the wrong account."

Of course, if Dave Smith has a policy with CaptainBosworth Insurance on AB12CDE, and Bill Bloggs has a policy with CaptainBosworth Insurance (or a different brand in their group) on CD23EFG, then there's no way that Dave Smith SHOULD be able to get a windscreen put onto CD23EFG and have his own policy pay…

They SHOULD be checking that Dave's claiming for a windscreen on AB12CDE, and if they're putting a screen in CD23EFG then it's Bill booking it in.

If somebody phones up and says "I'm Bill Bloggs and I need a windscreen on CD23EFG", then how many ID verification hoops do you make them go through?
Address?
DoB?
How many of us have the policy number to hand? What if the certificate was left in the glovebox when Dave borrowed the car?