Equifax hack: 44 million Britons' personal details feared stolen in major US data breach

[Andyorch]

An investigation was underway on Friday night after the personal data of up to 44 million British consumers was feared stolen by hackers in a massive cyber attack.

 

The information commissioner said it was investigating how the hack on Equifax, a US credit rating firm, affected UK customers, many of whom will be unaware their data is held by the company.

 

Equifax and its UK subsidiary companies state on their websites that they represent British clients including BT, Capital One and British Gas.

 

There are fears that customers of these companies could now be affected. BT said that "many companies in the UK" used Equifax services and said that it was "monitoring the situation closely".

 

The Information Commissioner's Office (ICO) has urged Equifax to alert affected UK customers as soon as possible, and said it will work with the relevant overseas authorities on behalf of British citizens.

 

http://www.telegraph.co.uk/technology/2017/09/08/equifax-hack-britons-data-watchdog-investigates-ukimpact-major/

[unclebulgaria67]

I was just thinking about this.

 

Given that you can't obtain an account with BT, Banks etc, without consenting to data being processed by CRA's, what legal rights do people have if say Equifax did not secure personal data. The stolen data was then used for fraudulent purposes or sold to people that had no legal rights to hold the data.

 

I presume under the DPA, you have rights to sue a CRA, even though you have no direct contract with them ?

[Andyorch]

Questionable isnt it ?