A significant data breach that includes names, dates of birth, nationalities, some contact and administrative information but not financial or medical data has been revealed. How should BUPA's customers who have been affected respond and what should they do, given that although they were told about the breach they have not been offered any advice?