More than one-third of Equifax’s UK records may have been exposed