Wanted to share my ongoing battle with to get them to tell me what data of mine was breached. Like true corporate heroes with a place in our collective hearts, and after multiple email back and forth, they have just started ignoring me.
Here was my original email to Quest:
Hi Quest Privacy Team,
Thank you for notifying me of the breach and I acknowledge actions taken to address the event within your systems. I am a cybersecurity professional, so I do understand the consequences of having my data breached in this way. I am requesting further information on the exact details regarding my breached personal data. You have stated:
- Your full name
- Your email and/or other contact details
Please be specific and let me know what “other contact details” are, as this is important and may affect how I need to respond. Also, can you confirm if my payment details were not breached? If you can’t confirm this, I will have to assume breach so please be specific; which of my financial details do you hold.
While I appreciate the steps you have taken to remedy the breach, the only support you have provided me is to advise me to be vigilant and contact IDCare. The risk of identity theft and financial loss I am exposed to is in no way my own fault and wholly due to your negligence. The support you have offered me is grossly insufficient.
Based on the above, I request you provide the following:
- Exact detail of my known breached personal data.
- Exact details of personal data held that you can not confirm has not been breached, this includes financial data, drivers licence etc.
- Fully funded enrolment in a dark web monitoring service for a minimum of 5 years.
- Support to update identity or financial data such as drivers licence and payment cards.
- Guidance on your intentions to provide financial recompense for affected customers.
I thank you for your consideration of my points raised above. I know I have raised some serious issues and demands. As a cyber professional I have a deep understanding of the risks I have now been exposed to and I need to put in place measures to protect myself.
I would like to continue this dialogue if you have anyone that wants to reach out to me personally.
Regards,
xxxx