Possible breach of data?

Options
craggs
craggs Posts: 256 Forumite
Name Dropper First Post First Anniversary Combo Breaker
in Energy
Hi

I am wondering if anyone could advise.

I logged into my energy account 2 nights ago and noticed my direct debit changed and the credit on my account everytime I refreshed my page.

Then my account number change and another name came up.I was able to access another account,infact 2 names came up,but with one my account number stayed the same.

I did screen shots and contacted my energy company,who asked for them.

They have gotten back to me and admitted an updated caused a small number of accounts to cross access and they are looking into it how much data could of been accessed,if any,although I was able to access another persons account.I provided them with there name and account number.

They want me to delete the screenshots,and they have apologised.

Im not sure what if anything I can do,I have for now not deleted the evidence.I don't know what steps to take,if this is serious or not so bad.

I don't want to name the company ,certainly not for now.

Thank you
Dony worry,be happy...

Comments

  • wavelets
    wavelets Posts: 1,164 Forumite
    Combo Breaker First Post
    edited 8 December 2018 at 10:14AM
    Options
    craggs wrote: »
    Hi

    I am wondering if anyone could advise.

    I logged into my energy account 2 nights ago and noticed my direct debit changed and the credit on my account everytime I refreshed my page.

    Then my account number change and another name came up.I was able to access another account,infact 2 names came up,but with one my account number stayed the same.

    I did screen shots and contacted my energy company,who asked for them.

    They have gotten back to me and admitted an updated caused a small number of accounts to cross access and they are looking into it how much data could of been accessed,if any,although I was able to access another persons account.I provided them with there name and account number.

    They want me to delete the screenshots,and they have apologised.

    Im not sure what if anything I can do,I have for now not deleted the evidence.I don't know what steps to take,if this is serious or not so bad.

    I don't want to name the company ,certainly not for now.

    Thank you

    You've done part of what you need to do - and the supplier is now doing what they need to do ... according to the information you have provided here, ... at least for now :)

    All that is left for you to do at this time is follow the intructions provided to you by the supplier.

    Edit: On a more positive note, may I be the first to provide you with a warm welcome back to MSE following a 4 year posting hiatus.
    https://forums.moneysavingexpert.com/showpost.php?p=74780609&postcount=279
  • [Deleted User]
    [Deleted User] Posts: 1,655 Forumite
    Name Dropper First Post First Anniversary Combo Breaker
    Options
    If you wish, you could inform the Information Commissioner's Office
    https://ico.org.uk/make-a-complaint/
  • t0rt0ise
    t0rt0ise Posts: 4,276 Forumite
    First Anniversary Name Dropper First Post
    Options
    It was a mistake. They've corrected it. No need to take it further.
  • kim81
    kim81 Posts: 15 Forumite
    Options
    Sounds like they are on top of things. You could change your password just to be on the safe side.
  • societys_child
    societys_child Posts: 7,110 Forumite
    First Anniversary Name Dropper First Post
    Options
    Im not sure what if anything I can do,I have for now not deleted the evidence.I don't know what steps to take . . .
    How much do you want?
  • badmemory
    badmemory Posts: 7,793 Forumite
    First Anniversary Name Dropper First Post
    Options
    but it should be necessary to ask that whilst they have corrected this specific "mistake" have they corrected the other similar ones caused by the same problem!
  • Grey_Critic
    Grey_Critic Posts: 1,337 Forumite
    First Anniversary First Post Name Dropper Combo Breaker
    Options
    Of course you should report it. Why have a Data Protection Act if nobody does anything when it gets broken.
  • craggs
    craggs Posts: 256 Forumite
    Name Dropper First Post First Anniversary Combo Breaker
    Options
    societys_child wrote: »
    How much do you want?

    How much??
    Dony worry,be happy...
  • craggs
    craggs Posts: 256 Forumite
    Name Dropper First Post First Anniversary Combo Breaker
    Options
    badmemory wrote: »
    but it should be necessary to ask that whilst they have corrected this specific "mistake" have they corrected the other similar ones caused by the same problem!


    Unsure,I have been back InTouch and they don't actually know how much data has been leaked.If I was able to access another person's acount,name,address,bills ,then I guess it works both ways,they also don't know how many,I have asked that.

    I'm unsure if they have contacted other either.
    Dony worry,be happy...
This discussion has been closed.
★ ★ ★ Meet your Ambassadors

Categories

  • All Categories
  • 343.2K Banking & Borrowing
  • 250.1K Reduce Debt & Boost Income
  • 449.7K Spending & Discounts
  • 235.3K Work, Benefits & Business
  • 608K Mortgages, Homes & Bills
  • 173.1K Life & Family
  • 247.9K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 15.9K Discuss & Feedback
  • 15.1K Coronavirus Support Boards