Dividebuy and data breech

[mightyroyals]

Hi

 

I recieved the following email a few days back I sent a complaint but had no response or acknowledgement 

 

 

Dear Me Unfortunately, I am writing to you to let you know that earlier this week we discovered that DivideBuy and its customers (including you) have been the victims of a cyber incident, which involved some of your personal data being accessed. I wanted to write to you as soon as I could, to let you know what we have discovered so far, and how we are going to protect you against any consequences of this attack. Details of the Data Breach In the last few days, since becoming aware of the incident, we have been working hard, together with external specialists, to make sure that all data is secure and that an attack of this kind cannot happen again. We have also established that within the information that was accessed it may be possible to identify: Name Date of Birth Address Telephone Number Email address Associated Alias Although some credit report information was also contained within the material that was accessed, this was not stored in a readable format and so is not likely to be able to be used by the person or persons who accessed it. Please be advised that the data compromised in the incident did not contain any bank account or credit card information.   Further Steps My primary concern, and the concern of everyone at DivideBuy, is to make sure that as far as possible you are protected from any worry or other adverse consequences as a result of this incident. In conjunction with TransUnion International UK Limited (“TransUnion”), one of the UK’s leading consumer credit reference agencies, we have therefore arranged a 12 Month subscription to TrueIdentity, an online monitoring service, at no cost to you. This credit monitoring service will notify you by email of critical changes to your TransUnion Credit Report.  Should you receive an email alert, you can review and validate the reported change by logging into the TrueIdentity portal. This allows you to identify any potentially fraudulent activity on your TransUnion Credit Report. How to access TrueIdentity To take advantage of this service and help protect your identity, please visit:  https://trueidentityassist.creditview.co.uk And enter the following Secure Access code below before 30th March 2021: DVB1346 Upon successful completion of the registration process, you will have access to the following features: Unlimited online access to the TransUnion Credit report. Unlimited online access to the TransUnion Credit Score, with score factors analysis. TransUnion credit monitoring alerts with email notifications to key changes on a consumer’s credit file. Unlimited access to online educational resources concerning credit management, fraud victim assistance and identity theft prevention. What should I do if I believe I am a Victim of Fraud? If you believe you are a victim of fraud, check your credit report and dispute activity via your TransUnion Credit Report that you do not recognise. TransUnion will then contact the Lender who has provided the data to make them aware that the data is possibly fraudulent. The Lender will then perform a fraud investigation and remove any data if they find evidence that fraud has occurred. You may wish to add password to your credit file as an extra level of security, so any lenders performing a credit search will need to request the password from you so they can proceed with the application. You can do this by adding a Notice of Correction (NOC), for free, to your credit file. You can do that by emailing consumer@transunion.co.uk with the wording you would like to apply and include your full name, address, and date of birth.  Please bear in mind that Notice of Correction data is not shared across the credit reference agencies. You can also request a Notice of Correction to be raised with the other credit agencies too, please see their contact information below:    Experian Ltd: https://www.experian.co.uk/consumer/guides/notice-of-correction.html Equifax: https://help.equifax.co.uk/EquifaxOnlineHelp/s/article/What-is-a-Notice-of-Correction1   You may also wish to contact Cifas, the UK’s fraud prevention service. They will be able to apply a Protective Registration warning on your credit file, for an administration fee.  To inform Lenders that you think your data could be at further risk of fraudulent access, so they can make additional checks to protect you moving forward.   The Protective Registration flag can be applied to your file with immediate effect by telephoning 0330 100 0180 (and must then be confirmed in writing).  You can also apply online at www.cifas.org.uk/pr_for_individuals. I, together with all of my colleagues at DivideBuy, truly regret any inconvenience this may have caused you, but we are working hard to put this right and to make sure that it cannot happen again.     Rob Flowers Chief Executive Officer You are receiving this important information email because some of your data was on our database at the time of the data breach. You have NOT been added to our marketing lists or any other email list. We are sending this email to a list of people to provide important and urgent information updates about the data breach ONLY. You will not receive any marketing emails from DivideBuy unless you have signed up to receive marketing emails from us. If you wish to contact us regarding the matter you can contact us by post or email dataqueries@dividebuy.co.uk www.dividebuy.co.uk Copyright © 2021 DivideBuy, All rights reserved. DivideBuy, Brunswick Court, Brunswick Road, Newcastle-under-Lyme, ST5 1HH, UK

 

I went on the dividebuy live chat and was told that dividebuy are not giving compensation for this breech, what can I do as this is causing me all sorts if worry now that my identity is going to be used in fraud, they have offered the 12 month transunion thing but I can't help but think this won't pick everything up on the dark web. I suffer from bipolar and I am really struggling to deal with it.

 

Is it worth me starting a County Court claim for damages or would I be wasting my time. Or would it be too early to start that and need to go through a certain route?

 

Tia

[Ethel Street]

Have you suffered any loss from fraud?

[dx100uk]

its a clever scam i bet you've never used dividebuy

bet its not from them either...

 

dx

[mightyroyals]

I did sign up to them a while back but never purchased through them, looking online there are alot of people in the same boat and the trust pilot page from them is filled with people having the same email and all having signed up to them, the ICO have confirmed that DivideBuy have made them aware of the breach. 

[dx100uk]

thankyou.

well just because someone alerts to a data breach it doesn't mean there is an issue for you.

2 hours ago, mightyroyals said:

Please be advised that the data compromised in the incident did not contain any bank account or credit card information.

is the most important bit 

i don't think we've ever seen a case of someone getting compo for this sort of thing

else the likes of yahoo, gmail etc etc would be bust by now.

 

happens all the time.

 

dx