HMRC are sending letters to taxpayers whose online tax accounts have been accessed by criminals with personal data obtained from non-HMRC sources. If you receive a letter, you are impacted, and as HMRC have taken action to secure your account, there is no action required by you. Please see this link for further information.