Talk Talk Cyber Attack.

I_have_spoken

TalkTalk admit elite hackers got around passwords, firewalls, security cordons, and successfully contacted customer services.

Richie-from-the-Boro

TT was using SHA-1 which the industry has long considered to be insecure, TT should have known about it, it its been all over their forums and flagged up as insecure by browsers for most of the whole of this year - they should have moved to SHA-2 signatures quicker

Jim431

Take a look at the Noodle privacy policy statement from their website

"" Noddle is mindful of the importance of upholding the security of information under our control. All data collected through the website located at noddle.co.uk ('Website') that is stored electronically, is stored on secure servers, and we have stringent security and confidentiality procedures covering the storage and disclosure of such information, in accordance with the Data Protection Act 1998.

We endeavour to take all reasonable steps to protect the privacy of your personal information. However, we cannot guarantee the security of any personal information you disclose on-line. You accept the inherent security risks of providing information and transacting over the Internet, and will not hold us responsible for any breach of security, unless this is due to our negligence or wilful default. ""

This doesn't says that personal data is encrypted.
Plus if it should be stolen then they are not responsible and you agreed when you signed up.

Another tasty target for the hackers which will compliment their growing stash - Unbelievable

colsten

Noddle have already got lots of your data, whether you personally access it or not.

enfield_freddy

over the weekend I have set up two direct debits with the DVLA , those should appear on my online banking early next week


the proof of the working of the noodle "email alert" will be if it informs me of those.


setting up of phantom direct debits , that just take one or two payments until noticed are a worry.


talk talk:


I do not have a cheque book , I do not go round giving my full name and address , bank acc No and sort code to people!


IF I buy something online , its with a debit/credit card and I have assistance if it goes wrong.


the proof of the "£20" noodle addon , will be the report sent to me!!!

colsten

enfield_freddy wrote: »

over the weekend I have set up two direct debits with the DVLA , those should appear on my online banking early next week


the proof of the working of the noodle "email alert" will be if it informs me of those.

Noddle won't know about the DDs, so they will not alert you about them.

Only things they know about are searches (applications for cards, bank accounts, insurances), new accounts, overdue payments, significant moves (+-) on balances. It's the new searches and new accounts that are relevant in the context.

enfield_freddy

yup , but the DD method is the method I suspect the scammers will use , as they have name/address/account number/sort code ,


as a well known Norfolk farmer would say "perfic!"

colsten

enfield_freddy wrote: »

yup , but the DD method is the method I suspect the scammers will use , as they have name/address/account number/sort code ,

I suspect that DD would be the very last method any fraudster would use. You can't just set up a DD - you must first be approved as a DD taker. Far too many hurdles to take for your average, and even your sophisticated, fraudster.

http://www.bacs.co.uk/Bacs/Businesses/DirectDebit/Collecting/Pages/GettingStarted.aspx

enfield_freddy

there was no Islamic ransom note , rumour's coming out of talk talk this morning are saying the theory is that it's a group of Methodists in Hounslow hoping to boost the value of their BT shares.

RumRat

Seems it wasn't as bad as first thought and those few that have had their accounts rifled were scammed by phone/email.

"TalkTalk said the attack was on its website, where full card details are not held - not on its core system.Any credit card details accessed were incomplete - with many numbers appearing as an x - and "not usable" for financial transactions, it added."

http://www.bbc.co.uk/news/uk-34627541