TalkTalk website hit by cyber-attack

joe134

Forex_Fred wrote: »

From what you've written it seems you should be sorting out TT's problems. Is part of the cause that there are just not good enough IT security people around or even people learning this skill?

There's plenty.
Trouble is,
They are all sitting in their bedrooms, hacking.:rotfl:

SallyG

http://www.theregister.co.uk/2015/10/27/talktalk_incident_management_review/

"Establishing what security measures may be considered "appropriate" will be key to TalkTalk's attempts to claim it has not negligently breached the DPA. The telco has so far absolved itself of responsibility, despite Harding issuing a soft "Sorry" during her BBC interview. TalkTalk's site denies a breach of the DPA, noting "This is a criminal attack. We have notified the [Information Commissioner's Office (ICO)] and we will work closely with them over the coming weeks and months." "

2010

There`s plenty of "online chat" available on TT site for any questions.
8am to 10pm seven days a week.
Go to my account page and there should be a box for online chat.

Raine_E_Day

2010 wrote: »

There`s plenty of "online chat" available on TT site for any questions.
8am to 10pm seven days a week.
Go to my account page and there should be a box for online chat.

I had immediate response to chat when I tried this a minute or so ago. It was unavailable last time I checked, so thanks.

I asked about early payment discount as bill received today. It was immediately applied to my account and I was told to pay the balance over the phone and was given a dedicated number to ring. Not happy to give TT my new card details, especially as early discount feature ends in December, so asked why balance could not be taken by direct debit. It was agreed instantly.

I could not see how to get copy of chat but was advised by very helpful and polite agent that you have to click on + for options.

2010

Raine_E_Day wrote: »

I could not see how to get copy of chat but was advised by very helpful and polite agent that you have to click on + for options.

Yes, you can get it emailed to you.
Whenever I contact TT I always use online chat.
That way you`ve got an exact record of what was said for later if you need it.
Caught too many times with promises over the phone that never happened.

SnowTiger

M&S and British Gas have also fessed up to data seepage this week.

http://www.bbc.co.uk/news/business-34657042:

A fault with Marks and Spencer's website allowed customers to see each others' details when they logged into their own accounts.

Dr Bob Price was one of those affected. He told the Today programme how the details of someone else, in a different part of the country, appeared on his screen while shopping online.

"It didn't give bank account details, it didn't give credit card details or anything of that nature," he said.

http://www.bbc.co.uk/news/technology-34663210:

British Gas has contacted about 2,200 of its customers to warn them that their email addresses and account passwords were posted online.

It says, however, that it does not think its own systems were breached.

The affected accounts have been disabled following the discovery.
No bank account or payment card details would have been revealed, but the logins could have been used to view users' names, addresses and past energy bills.

Obviously not as serious as the TalkTalk splurge, but it goes to show these things are more common the perhaps people realise.

Of course that doesn't make them acceptable, but it is a reminder that we need to always be on our guard.

Sadly, the data losses we know about are probably just the tip of the iceberg.

enfield_freddy

You can find the latest progress on the attack here. I will, however answer some of the questions that you have highlighted in this topic.

The My Account service is currently offline, due to the recent server attack. There is no ETA on when the service will be restored, but rest assured it will be available in the coming weeks. Once the investigation has concluded, all suspended services will be opened again.

It would not be possible to issue the names of those affected. TalkTalk will be dealing with affected customers on a case-by-case basis, if necessary.


takes time to rebuild a site from scratch dunnit!




I thought they said that a 15 yr old boy had been arrested , therefore why have more investigations? , case solved TT, next time lock your doors!

Raine_E_Day

enfield_freddy wrote: »

You can find the latest progress on the attack here. I will, however answer some of the questions that you have highlighted in this topic.

The My Account service is currently offline, due to the recent server attack. There is no ETA on when the service will be restored, but rest assured it will be available in the coming weeks. Once the investigation has concluded, all suspended services will be opened again.

It would not be possible to issue the names of those affected. TalkTalk will be dealing with affected customers on a case-by-case basis, if necessary.

The contributor says he works for TalkTalk's Technology Development Engineer team but there again, anybody could say that.....
https://community.talktalk.co.uk/t5/Discussion-Area/When-is-My-Account-going-to-be-back-online-and-why-is-it-down-at/m-p/1791041#U1791041
From TalkTalk Community Manager:

I can confirm that Jackta doesn't represent our company or community and his post and views are his own and more importantly not accurate.

He only registered for that forum 5 hours ago so best to take his comments with pinch of salt!

enfield_freddy

true , but my question above , if its as minor as they are now saying , and there has been an arrest AND all the important data is not held on the main site (their words!) then why is the main site down 8 days after the attack?


does the main site actually exist anymore? was it actually caused by major hackers and not the 15 year old child***


was there a ransom , and they have declined it?


** quick reporting of the 15 yr olds arrest , and later in the day released (on remand?) , maybe a silly minor charge , but no press follow up to this?


I wonder if the site when reopened will have a mysterious "new" look?

SnowTiger

enfield_freddy wrote: »

true , but my question above , if its as minor as they are now saying , and there has been an arrest AND all the important data is not held on the main site (their words!) then why is the main site down 8 days after the attack?

Perhaps to give them time to carry out a security audit. They may have brought a third party in to do that.

Wasn't it you who posted the message I told MSE to remove that contained some of the data that had allegedly been stolen?