Equifax Data Breach: Investigation Shows 15.2m UK Records Targeted

Equifax has confirmed nearly 700,000 UK consumers were affected by the massive data breach it suffered earlier this year – more than the 400,000 it had initially thought were impacted.

The company said an independent investigation found that a file containing 15.2 million records between 2011 and 2016 was attacked, with names and dates of birth at risk, and that 693,665 could have had personally identifiable information stolen.

The majority of that figure (637,430) might only have had their phone number accessed, however this opens them up to scams, while the remainder had at least one of their email address, secret questions, partial credit card details or driving licence potentially compromised.

Equifax data breach

In the US, Equifax has already increased the number of potential victims from 143 million to 145.5 million – or half the population of the USA. The hack has been attributed to a web server vulnerability, however its UK systems were not breached.

The reason why British consumers are caught up in this is that a “process error” meant that some UK data was stored in the US.

Equifax said it wasn’t appropriate to contact UK consumers until it had “absolute clarity” following the investigation and would be writing to those affected. It will not be calling consumers for security reasons as this would invite phishing scams.

“Once again, I would like to extend my most sincere apologies to anyone who has been concerned about or impacted by this criminal act. Let me take this opportunity to emphasise that protecting the data of our consumers and clients is always our top priority,” said Patricio Remon, President for Europe at Equifax Ltd (UK).

Loading ...

“It has been regrettable that we have not been able to contact consumers who may have been impacted until now, but it would not have been appropriate for us to do so until the full facts of this complex attack were known, and the full forensics investigation was completed.

“I urge anyone who receives a letter from Equifax to take advantage of the remedial services being offered to help mitigate against any risk, or to contact us should you have any questions.”

The company has previously said it is working with the Financial Conduct Authority (FCA) and the Information Commissioner’s Office (ICO).

Do you know all about security in 2017? Try our quiz!

Steve McCaskill

Steve McCaskill is editor of TechWeekEurope and ChannelBiz. He joined as a reporter in 2011 and covers all areas of IT, with a particular interest in telecommunications, mobile and networking, along with sports technology.

Recent Posts

Ericsson To Cut 1,200 Jobs in Sweden Amid ‘Challenging’ Market

Swedish telecoms giant Ericsson blamed “challenging mobile networks market” and “further volume contraction” for job…

37 mins ago

FTX’s Sam Bankman-Fried Sentenced To 25 Years In Prison For $8bn Fraud

Dramatic downfall. Sam Bankman-Fried sentenced to 25 years in prison for masterminding $8bn fraud that…

2 hours ago

Elon Musk Orders FSD Demo For Every Tesla US Sale

Fallout avoidance? Tesla buyers in the US must be shown how to use the FSD…

2 hours ago

Amazon Pumps Another $2.75 Billion Into Anthropic

Amazon completes its $4bn investment into AI firm Anthropic, after providing an additional $2.75bn in…

4 hours ago

The Sustainability of AI

While AI promises unparalleled efficiency, productivity, and innovation, questions regarding its environmental impact loom large.…

7 hours ago

Trump’s Truth Social Makes Successful Market Debut

Shares in Donald Trump’s social media company rose about 16 percent after first day of…

7 hours ago