you should have something from them around mid October
And it'll be a request for all sorts of data "just to make sure that we know it's you". Or, as I explained to someone who purported to be from my credit-card company (unsolicited call: "we just want you to know about some offers but first we need you to identify yourself". My response was "since I don't have a clue who you are, why don't you tell me something from my account to identify yourself first?". She got quite shirty and kept insisting that I identify myself. The phone suffered a service disconnection event shortly afterwards..)
All of which data will, undoubtedly find its way into the public view either by incompetence or greed. Or incompetent greed..