USS personal data breach

[saltedcaramelhotchoc]

Has anyone else had an email from USS saying their personal data has been breached and offering them 12 months membership of something called Experian (some sort of credit reference agency)? I can't believe that first USS basically mis-invested our money and now they've managed to pass on my data... anyone else had an email today? and why aren't UCU onto this?

Claim for what? Have you suffered a financial loss as the result of the data breach?

And for everyone slagging off USS (although God knows it's deserved, but just not in this case) the breach was suffered by Capita. USS is one of around 90 companies affected:

https://www.bbc.co.uk/news/technology-65746518

@florissante I've just written up the following example letter and intend to send to USS (you need to let them know before you can submit a complaint with ICO). It is still useful to do. so How does this sound? Note that I have NO legal credentials, this is just me putting collating some information and aiming to start a paper trail:
"I am writing you in response to your email to me sent on 24 May 2023, with the subject line "An important update about your data". In this email you inform me about an update regarding a data breach though your choice Capita computer servers accessed by hackers early 2023. In your email from 24 May you said that this data breach included in files generated by Capita from the main Hartlink system, and held separately on their servers, to facilitate operational processes. You further mentioned that "Capita have identified from their investigations that personal data was “exfiltrated” (i.e., accessed and/or copied) by the hackers. The information accessed includes your title, initial(s), and name, your date of birth, your National Insurance number, your USS member number and your retirement date." This issue has caused me a great deal of emotional distress, anxiety, and inconvenience. I fear for my data being misused, and I experience distress and inconvenience because of your response to this incident, which I perceive as highly inadequate (for instance, I have also incurred additional costs for having to take out a Cifas Protective Registration for the next two years, which was not offered by you in your response).I am writing to inform you I am intending to file a complaint regarding this issue with the Information Commissioner's Office (ICO, https://ico.org.uk/) and intend to claim data breach distress compensation for emotional distress, anxiety, and inconvenience caused by your breach of the Data Protection Act 2018 (DPA) and the General Data Protection Regulation (GDPR). I also intend to complain to ICO regarding your handling of the loss of my data in this breach. In the first instance, you should let me know what steps you are planning to take to compensate me for the issues experienced because of your inadequate safeguarding of my personal data."

Sorry for the lack of paragraphs. I put them in!

Thank you for that. I need to sort out sending something - I've been sticking my head in the sand about this but am very angry - my personal details including NI are out there forever now and while I can change passwords I can't change NI number. I would be amazed if there isn't some sort of group claim for compensation.

I finally got myself to write that and sent it via email and post. I don't think there is a class action, other than no win no fee lawyers with somewhat dodgy credentials. At least now there's a record of me declaring my intention. I am seriously pissed off with them after all the stunts they've pulled with the revaluation and now this data breach!

I think there is quite a long window for a class action so there may still be
The annoying thing is that their email reassured me that my pension is safe, just not my ID. My pension is so tiny I would much rather they had lost that and kept my information securely

There's a thread on this issue on the money saving expert forum - for info. People are trying to compare no-win no-fee solicitors

It’s been a year since the infamous Capita data breach. Has anyone signed up to one of the class actions and, if so, which one? Did anyone experience any issues with your stolen data being used?

I haven’t signed up to a class action group.
I did notice what appeared to be spurious insurance company searches (spurious in that I didn’t initiate them), but haven’t been adversely affected in a material way so far.

I didn't, will be interesting to hear if others did.

This is my experience also - lots of insurance claims mostly it seems for cars (I don't have one).

I haven't signed up to a class action though - not sure what it would involve.

Anyone got further with this? There's a comparison of the class actions here consumervoice.uk/legal/capita-may-be-forced-to-compensate-people-exposed-to-cybersecurity-risk-after-hack/

Thanks @aramox1 , that is interesting.

Should we be signing up to the claim, do you think? I have been getting a few searches on my profile. Why different class actions?