Classic Line Insurance - Possible Data Breach ?

[Helgathe993Targa]

Dear Fellow Members

Like many TIPEC members I insure my cars via ClassicLine.

On 7th February I received an email from them to apologise for an email sent the previous week, containing a virus, from a fake ClassicLine account. Their head of IT explained that there had been no compromise of our personal data. Working in the commercial intelligence and security business I am not convinced by that answer and asked ClassicLine for a more detailed explanation. To date I am still waiting for that.

I have written to them again, today, asking for an explanation. I have also asked if they have reported this incident to the Information Commissioners Office.

I post on here for 3 reasons:

1) You may have been a recipient of the virus infected email and since my virus checker did not pick it up you may wish to double check your computers.
2) It seems possible to me that someone may have access to the email addresses of ClassicLine customers. If they have access to that (and I emphasise the 'if') then they may also have access to other details (I emphasise 'may');
3) The club has a relationship with ClassicLine and they must take all customer concerns (but dare I say TIPEC members particularly) seriously. If the don't respond I will report the incident to the Information Commissioners Office.

Do drop me an email if you have any concerns. I will update this post with any correspondence I receive from ClassicLine.

For reference, ClassicLine's email is below.

Steve

[Largie]

I received the e mail in question which I recognised as suspicious and put it in my spam folder. I also received the Classicline message which I read. My computer remains fine.

David

[Helgathe993Targa]

Further to my last ClassicLine have told me that car registration details were probably also taken. If registration numbers were taken then possibly other data was as well.

They have reported the incident to the Information Commissioner.

[R_D_Olivaw]

Hi Steve,

They assured me on the 28th January that there had not been a data breach, so I'm interested to see where this goes.

Dear Ian

We are sorry that you may have, within the last few days, received an email that appears to have come from us.

We can confirm that it has NOT come from Classicline and we would ask you to delete this email and not open it. Please be assured that our servers holding your personal details have not had any entry gained or have been ‘hacked’ and your personal data is, as always held in a secure hosted environment that is separate to all email servers.

We apologise for any inconvenience this may have caused.

Kind regards,

xxxxxxxxx