Talk Talk Cyber Attack.

bod1467

ColinFishwick wrote: »

As always if you get a call asking for personnel information dont not give it out.

Exactly. Tell them they need to contact the HR department not you.

aardvaak

enfield_freddy wrote: »

cheeky!


(2018 actually)

But you have to request it now though!

bsod

The facts and press releases are all over the place, releasing guesses of what may have happened is of little use to anyone

https://www.youtube.com/watch?v=apV5Q_f7KH0

in the course of a few minutes, it went from a ddos attack on a website (which website?), to personal details may have been stolen (how does a ddos enable access to backend database systems with payment details that should be encrypted), to have been stolen.

Fightsback

bsod wrote: »

in the course of a few minutes, it went from a ddos attack on a website (which website?), to personal details may have been stolen (how does a ddos enable access to backend database systems with payment details that should be encrypted), to have been stolen.

While thieves create a diversion at the front door, they slip in through the back door and happily walk off with your TV.

Quite astounding given previous breaches that they haven't yet learned to encrypt their database.

A very large fine from the ICO should be forthcoming.

fermi

bsod wrote: »

The facts and press releases are all over the place, releasing guesses of what may have happened is of little use to anyone

https://www.youtube.com/watch?v=apV5Q_f7KH0

in the course of a few minutes, it went from a ddos attack on a website (which website?), to personal details may have been stolen (how does a ddos enable access to backend database systems with payment details that should be encrypted), to have been stolen.

http://www.theregister.co.uk/2015/08/11/carphone_warehouse_ddos_before_giant_data_breach/

bsod

the ddos and data breach are two different issues, talking about a sustained attack just muddy's the water or gives the impression that the spin team should speak to someone technical before releasing press releases, the ddos is not the important part of the story

The data is more valuable if no-one knows about it happening, unless there is one person in charge of all security including repelling ddos and intrusion detection, don't really buy that idea, if it happened before, then the security team would be wise to it, so it would alert them rather than distract

I_have_spoken

Reports of their customer's bank accounts being emptied. Worrying.

http://www.telegraph.co.uk/news/uknews/law-and-order/11950753/TalkTalk-confirmes-it-received-cyber-attack-ransom-demand.html

RumRat

I_have_spoken wrote: »

Reports of their customer's bank accounts being emptied. Worrying.

Where does it say that......It's bad enough without false rumors being spread..

robotrobo

I_have_spoken wrote: »

Reports of their customer's bank accounts being emptied. Worrying.

http://www.telegraph.co.uk/news/uknews/law-and-order/11950753/TalkTalk-confirmes-it-received-cyber-attack-ransom-demand.html

Im afraid mines been emptied again!, we are going to have words when SHE gets home:)

bsod

one tweet, which sounds more like sarcasm