The Office of the Data Protection Authority (“ODPA”) has been notified of a personal data breach involving Access Personal Checking Services Ltd. ("APCS"), a UK based company that facilitates Disclosure and Barring Services ("DBS") checks. The breach is a result of a cyber attack.
The information reportedly includes individuals’ basic personal information, contact details and identity information, such as passport, driving license, and national insurance details.
The ODPA has been contacted by a number of Bailiwick residents who have been affected by this breach and, as a result, are engaging with APCS. After contacting APCS they have now submitted a formal breach notification to our office.
Based on current information provided by APCS we understand the impact on Guernsey residents may be limited.
The ODPA highlights the following advice to guard against identity theft and other harms from compromise of your personal information:
- Practice vigilance. Examine monthly credit and bank statements. Are there new unknown or suspicious charges?
- Be on guard for red flags. Is there a sudden increase in credit inquiries or alerts? An interruption of automated payments to any of your accounts? These could be indicators of compromise of your identity and personal information.
- Protect your passwords. You may want to consider changing your passwords. Use different passwords for different websites, accounts and devices. Two-factor authentication is best. And regularly update security settings
If you have friends or family members who are less tech-literate, share this guidance with them and help them to understand the warning signs.
Further helpful guidance on how to protect yourself from identity theft:
- Identity fraud and identity theft | Action Fraud
- Scams - States of Guernsey
- The Little Book of Big Scams – Second Edition
If you are concerned that your personal information or data rights have been compromised, you can contact the ODPA at [email protected] or by phone at 01481 742074.