Go to page content

Find out what you lost in the Experian data breach today.

Quickly find out what information Experian had of yours today. It's fast and completely free.

Worried your data has been compromised by Experian? You're not alone.

Credit reference agency Experian has been sharing the personal information of millions of people without consent and must stop, the UK's information commissioner has ruled.

The original complaint about Experian's data sharing practices was raised by Privacy International, and the investigation that followed found that Experian and two other credit reference agencies - Equifax and TransUnion - were invisibly processing data.

In other words, they were sharing data without the knowledge or full consent of their users.

An investigation found that the agencies had access to the data of almost every adult in the UK, which was then "screened, traded, profiled, enriched, or enhanced to provide direct marketing services".

What personal information about you might have been sold?

  • Name, address and contact details
  • Bank and insurance details
  • IP Address & Cookie identifiers
  • Marital status and number of children
  • Political opinions and affiliations

This personal data could be used to financially harm you, or as a tool for identity theft.


What can I do to protect myself?

You have the legal right to demand that Experian and other credit agencies send you everything that they know about you. You can then find out the scale of the problem and take action.

This is because under GDPR, you have a legal right to access your information for free by sending a subject access request. A subject access request allows you to see all of the information a company holds about you.

To protect yourself, simply:

  1. Send your request from the top of this page
  2. See what they have in their response
  3. Stop your data being sold by telling them to delete it

If you need any help or have further questions, our support team would be happy to help.

What's that?

A Subject Access Request, or ‘SAR’ is a written request that you send to a company asking to see your personal data.

How can I send a request through Rightly?

Through Rightly, you can send a request quickly, easily and for free. No finding data protection emails or needing to supply excessive amounts of information, just one process with lots of customer support.

Our mission is to make data fairer for all, which means no hidden costs, subscriptions or data sharing.

What if the don't reply to my request?

Don't worry, they have to by law. You can ask any company if they have your personal data, even if you don't know for sure whether or not they have it. They have to tell you what they have, as well as how and why they are using it. This is thanks to your ‘right of access’ under GDPR law. GDPR applies in the UK and EU.

After the company has received your request, they have to reply in full within 30 days, or give a valid reason for asking for an extension, by law. If this happens, our support team is here to help!

Why Rightly?

We’re free because our mission is to make data fairer, for everyone.

We don't use consumer data for commercial purposes, which means we'll never, ever sell your data. It also means that there are no adverts or hidden costs.

Keeping your data safe