Talk Talk Mobile hacked

crankup

I had a similar email from mobiles today. Cancelled credit card immediately. Only bought the phone last week. They've taken the site down while they work out what patches they should've applied to the database etc. Amateur IT. These flaky IT companies should be security audited on a regular basis, its happening too often.

Helix

crankup wrote: »

I had a similar email from mobiles today. Cancelled credit card immediately. Only bought the phone last week. They've taken the site down while they work out what patches they should've applied to the database etc. Amateur IT. These flaky IT companies should be security audited on a regular basis, its happening too often.

Yeah I can't work out why they haven't repointed the DNS of these sites to another server outside their network (Amazon S3 perhaps) hosting a static page with at least some information for customers about the security breach.

System

I'm with Talkmobile and looks like they are affected too as must still have some links with cpw despite being taken over by vodafone this year.

Had no contact from them and website never down, but will be giving them a call today.

saintalan

teepee83 wrote: »

I'm with Talkmobile and looks like they are affected too as must still have some links with cpw despite being taken over by vodafone this year.

Had no contact from them and website never down, but will be giving them a call today.

Extract from my email:

[FONT=&quot]I am writing to you as a precaution after we discovered on the 5th August that some of Carphone Warehouses IT systems had been subjected to a sophisticated cyber attack.[/FONT]
[FONT=&quot]Up until February 2015, talkmobile's website was operated by Carphone Warehouse on the IT systems that were impacted by the attack. The systems that contain your billing and my account data are managed by talkmobile and have not been breached as part of this attack nor has talkmobiles new website introduced in February this year.[/FONT]
[FONT=&quot]We immediately took action to secure these systems and launched a full investigation with a leading cyber security firm to help us understand the impact of this attack. Our investigation is still going on.[/FONT]
[FONT=&quot]At this stage, our investigation indicates that some of the data held on our systems has been accessed and this may include some of your personal details, including your name, address, date of birth and bank details.[/FONT]

Anybody make sense of that?

Thanks

Alan

crankup

They didn't even encrypt the passwords to people who created accounts!
https://twitter.com/TalkTalkCare/status/630093277144948736

Terrible for an online firm. And they imply that we should have to sort it out, pay for Experian checks. There is nothing about this that implies "sophisticated" - just cheap an unmaintained.
I'd like them to pay for some Experian access for me - dont know who to contact though....conveniently for them. Anyone have a decent contact?

50Twuncle

crankup wrote: »

They didn't even encrypt the passwords to people who created accounts!
https://twitter.com/TalkTalkCare/status/630093277144948736

Terrible for an online firm. And they imply that we should have to sort it out, pay for Experian checks. There is nothing about this that implies "sophisticated" - just cheap an unmaintained.
I'd like them to pay for some Experian access for me - dont know who to contact though....conveniently for them. Anyone have a decent contact?

Try [EMAIL="dido.harding@talktalkplc.com"]dido.harding@talktalkplc.com[/EMAIL]
She will pass it on to a minion !!

50Twuncle

I have just tried to change my TT login password (as advised) and whilst I am able to log in and access the full site - when I try to change the password - the thing freezes
I AM NOT HAPPY !!

50Twuncle

I predict that this is the start of major shake up with respect to data protection
If you think about it - it - everyone from BT through Sainsburys and also Government departments hold personal data on most of us - how many of those encrypt the data ?
Not all of them
Watch this space....

Enquiror

I emailed Dido (TalkTalk CEO) directly and had a response from her iPhone saying her CEO office would contact me. They contacted me within the hour and have now offered me £50 (£30 for two months of Experian subscription and £20 compensation for inconvenience). I would like to know if there is such a thing as class action or collective redress that could be initiated for all 2.4m affected but have no idea how that currently works in the UK. Any information or advise would be welcome.