Yes, moving house does not remove you from this breach. Former Southern Water customers can still have retained billing records exposed and should contact the company to check.
Southern Water is the water supplier for Kent, Sussex, Hampshire and the Isle of Wight. Southern Water confirmed on 12 February 2024 that thieves stole data from a limited part of its server estate, described in its 12 February customer update. The company first noted suspicious activity on 23 January.
Table of Contents
- Are former customers still at risk?
- How do I check an old Southern Water account?
- What customer data was at risk?
- What should moved customers do now?
Are former customers still at risk?
Moving does not delete old billing files. Southern Water kept records for former customers, and those retained records can fall within stolen data. ICO guidance advises people to contact the organisation directly to ask if they were affected.
A notification letter may still go to your old address. That delay leaves moved customers unaware for longer. Contact Southern Water now with your current details instead of waiting.
How do I check an old Southern Water account?
Call or message Southern Water and state that you are a former customer. Have your old address, approximate move date and customer reference number ready.
That information helps staff locate the old account. Keep a note of the date, adviser name and response. If you move again, update the company so any later notification reaches you. Do not rely on mail forwarding from an old address alone.
- Give your current phone, email and postal address for reply
- Ask whether your old account falls in the affected set
- Ask what contact details the company now holds for you
What customer data was at risk?
The Register reported names, dates of birth, National Insurance numbers and bank details in its breach report. Bank details meant account and sort-code numbers, plus customer reference numbers.
TechCrunch reported Southern Water's early estimate that 5-10% of its customer base was at risk in its breach analysis. That range meant roughly 230,000 to 470,000 people. Southern Water said advisers were still confirming whose data was affected.
What should moved customers do now?
The ICO advises affected people to monitor bank statements and alert their bank to unusual activity in its breach advice. Check statements for your old payment accounts as well as current ones. Call your bank promptly if you see an unfamiliar direct debit or payment.
Treat unexpected contact as possible phishing using stolen details. Former customers face added risk because a caller may quote an old address to sound genuine. Do not use phone numbers or links in a suspicious message. Contact the organisation on its published number and report the attempt.
- Calls or messages claiming to be Southern Water, your bank or HMRC
- Requests for bank logins, one-time codes or full passwords
- Links or attachments asking you to verify billing details
You Might Also Like
- Southern Water Data Breach: What to Keep From Your Notification Letter
- Southern Water Data Breach: How to Check the Identity-Monitoring Offer in Your Letter
- M&S Data Breach: What Masked Card Details Mean for Customers