Boots Zellis Data Breach

[cwhaley]

I am a former employee of Boots, having worked there a number of years up until redundancy during Covid.

I received a letter from them, addressed to me as a "former colleague" advising that my details were involved in a data breach (covered in the news such as https://news.sky.com/story/bas-uk-staff-exposed-to-global-data-theft-spree-12896900). They have apologised and offered me 24 months' membership of Experian's top level package (so ironically, they want me to share my details with yet another third party company).

I know unofficially that company made me redundant because my six years at the company was significantly cheaper to pay out, versus the 30 years (each) that the other two colleagues in the selection pool had. That is obviously irrelevant, but it left a bitter taste in my mouth and I'd rather not let something like this new incident pass.

Has anybody else experienced something similar? If so, I want to know if seeking compensation is a realistic option.

 

[Dork Lard]

A quick Google gives a few results of the ambulance chaser type legal outfits who are collecting names for class action type suits.

AFAIUI the breach will include everything needed to clone you financially . . . . . .

 

[conny]

Experian, (and a number of other credit reference agencies0, will probably already have your personal details if you have ever borrowed money.

This will include, (but not limited to), taking out a loan, having a mortgage, buying something on HP, having CCJ's. In fact, unless you have gone through life paying cash for everything, your name will be on a credit reference agency. The information will also include any addresses you have lived at, any financial connection to someone, such as a mortgage/joint loan application, joint HP application etc.

And if you have been refused credit at any time, don't bother asking the credit reference agency. They will just refer you back to the lender to tell you why. The only thing about these agencies is they give you a score indicating if you could be a risk. It doesn't mean you will get a loan or be given credit to buy something, as you are matched against the lenders criteria to see if you are suitable.
Someone I know, was recently refused a £10k loan, despite having over 40 years flawless credit history and 'Very Good-Excellent' ratings across 3 agencies used by the lender. When he enquired why, he was told to contact the agencies for an explanation. They told him they do not give recommendations to lenders, just figures and he should ask the lender. After battling backwards and forwards, the only answer why he didn't get it, was because he failed to meet their criteria. They refuse to tell him what that criteria is or how to meet it.

I certainly would accept 24 months membership as compensation for anything.

 

[cwhaley]

A quick Google gives a few results of the ambulance chaser type legal outfits who are collecting names for class action type suits.

AFAIUI the breach will include everything needed to clone you financially . . . . . .

I've noticed an absolute torrent of spam e-mail entering my inbox which makes me wonder if it's connected.

It's worried me because they have my bank details, NI number, name, address, etc. -- all of which haven't changed since I was made redundant so they are current.

I did see a few companies gathering names, but didn't really understand what this meant. I'll keep digging and see if there's any interest amongst staff.

 

[cwhaley]

Experian, (and a number of other credit reference agencies0, will probably already have your personal details if you have ever borrowed money.

This will include, (but not limited to), taking out a loan, having a mortgage, buying something on HP, having CCJ's. In fact, unless you have gone through life paying cash for everything, your name will be on a credit reference agency. The information will also include any addresses you have lived at, any financial connection to someone, such as a mortgage/joint loan application, joint HP application etc.

And if you have been refused credit at any time, don't bother asking the credit reference agency. They will just refer you back to the lender to tell you why. The only thing about these agencies is they give you a score indicating if you could be a risk. It doesn't mean you will get a loan or be given credit to buy something, as you are matched against the lenders criteria to see if you are suitable.
Someone I know, was recently refused a £10k loan, despite having over 40 years flawless credit history and 'Very Good-Excellent' ratings across 3 agencies used by the lender. When he enquired why, he was told to contact the agencies for an explanation. They told him they do not give recommendations to lenders, just figures and he should ask the lender. After battling backwards and forwards, the only answer why he didn't get it, was because he failed to meet their criteria. They refuse to tell him what that criteria is or how to meet it.

I certainly would accept 24 months membership as compensation for anything.

I've never actually used these companies seriously -- only FreeScore. It never helped when I got a mortgage, and only really served as a 'feel good factor' when I saw the score. All I suppose lenders are interested in is total debt, how good your repayment history is and your personal details.

My wife didn't have any credit when we got our loan (no phone or car on finance, no credit card, etc.) -- it made getting the mortgage more difficult!

If there's not much to gain from registering with Experian then I'll continue to explore the interest in financial compensation.

 

[conny]

I go through phases where I get inundated with spam mails. They all start in my junk mail because I have set my inbox only for people in my contacts list. If you are on my contacts list you will get through to my Inbox, but only from the exact email address you have given me originally.

I have a couple of companies on my safe list, but if their sales dept email me, it goes to the junk box. From there, I can either accept it and put in my contacts, (I never do), or block them. The worst ones are casino types. I just highlight them and block them every time. They come back with adjusted email addresses or something and I block them again. Eventually they dwindle away for a few months then it starts up again.

If you are looking to sue them for anything, make sure you look for the representative yourself. Don't be seduced by adverts from anyone. Look them up independently from various media sources, not just Google.

@cwhaley you can go on these websites completely free of charge and see what basic details they hold on you. I guaranttee, any you pick will have a file on you and given you a credit rating.

 

[Dork Lard]

It's worried me because they have my bank details, NI number, name, address, etc. -- all of which haven't changed since I was made redundant so they are current.

They have everything they need to clone you financially.

Because of my personal wealth I am aware that I am a high value target. Because I am aware I have taken steps to minimise the risk. Yet the risk cannot be ruled out altogether . . . . . !

The way I see it & the way I live my life today is that if I didn't spend it then it doesn't come off my balance.

Think of it this way. They can financially clone you tomorrow, make themselve's rich & ruin your life for however long it takes you to sort it all out. One of the reasons they don't (& have no history of doing) is this then exposes them. They are reluctant to act on all of this information they have because when they stole the information they knew all the precautions to take to prevent their ID becoming known, when they start spending it . . . . . That creates the pathway back to them.

 

[motorbiking]

You can claim the cost associated with any necessary remediation and potentially for the stress caused.

I would avoid a so called “class action”.

They had an obligation to keep your data secure.

You should ask them what data was leaked so you can take steps. Change bank accounts etc.

Experian can help you track identify theft. But you and they know this is worth a bit more.

3-5K is worth a punt. With a good letter. But first you demand details of the information they lost.