> It said recipients have been given 12 months use of a service operated by Experian, a credit score company, that helps "detect possible misuse of your persona

> It said recipients have been given 12 months use of a service operated by Experian, a credit score company, that helps "detect possible misuse of your personal data". Hmmm - I don't have much faith in Experian's approach to securing personal information and only providing 12 months service is a joke. If a company (i.e. Capita) leaks information through their own lack of competence, then they should be required to indemnify the victims for as long as the data is relevant - in this case it would be however many decades until the people retire. If you're going to store private information that remains relevant for a long time, then there's a need for much greater responsibility in ensuring that it doesn't get leaked.