We are sorry that hackers were able to access USS members’ data.
Capita confirm they have taken extensive steps to recover and secure this data and is monitoring the ‘dark web’ in case hackers try to sell it. We have also commissioned our own review of the ‘dark web’, and our third party investigation company also found no evidence of the exfiltrated files. We did not share any member personal data outside of USS as part of this exercise.
Here are 3 things you can do to stay safe.
1. Sign up to Experian’s identity-monitoring service for free
USS members get one year’s free access to an identity-monitoring service from Experian (a leading credit-reference agency).
Members in the UK can use Identity Plus. Members abroad can use IdentityWorksSM. Both tools monitor the web and alert you to fraudulent activity. Experian will then help you sort it.
You’ll need your verification code. You’ll find this in the email we sent you from firstname.lastname@example.org, or the letter from us.
If you have any questions on Experian’s service or issues with your code, take a look at our FAQs – you’ll also find how to contact Experian here.
2. Watch out for scams
Follow our tips to help you to not fall for a pension scam.
3. Do not give out your personal information unless you know who you are talking to
We will not call you about this incident unless you ask us to. So if you think someone is impersonating USS, hang up and report them to email@example.com.
If you get a suspicious email, forward it to firstname.lastname@example.org.
Forward suspicious text messages and telephone calls to 7726. This includes unsolicited calls from anyone claiming to be from USS, Experian or Capita.
If you get a suspicious brochure or letter in the post, search for the company online and contact them using details from their official website, not any contact details in the suspicious mail.
If someone tries to change your National Insurance information, HM Revenue & Customs will contact you. But if you’re worried, you can phone them on 0300 200 3500.
If you think you have been scammed or defrauded, report it to the UK’s national reporting centre for fraud and cyber crime, Action Fraud, by phoning 0300 123 2040 or going to actionfraud.police.uk.
If you’d like more information, the National Cyber Security Centre and the Information Commissioner’s Office (ICO) both provide guidance that may be useful.
If you have a question, email us at email@example.com.