TalkTalk Hacking

colsten

Figgerty wrote: »

Frankly, this TT data hack has also made me worry about the security of the data held on me by all companies, including Noddle. Any criminal getting their hands on ALL this information on one person has a much better chance of scamming anyone than someone with just a telephone number and/or email address. They would be very convincing.

I think you are over-worrying. There are tens of millions of people just in the UK who use online banking, email, online shopping etc etc etc all the time. Generally there is no issue if you keep your security details to yourself, and only use secure sites for shopping and banking. There is no 100% guarantee that you will never fall victim to a fraudster, but then there is no guarantee that you will never have an accident if you use the roads.

masonic

Figgerty wrote: »

I should have said private not personal. She has supplied her 3 forenames & surname, date of birth. bank card details including the CSV code, address, telephone number and email address - all to one company.

Full name, address and date of birth will all have already been held by Noddle, care of the electoral roll. Email address and phone number would not typically be considered private and are likely held on public databases elsewhere unless she has been extremely careful not to give out these details to other companies. So, really, it's just the card details that are likely to be new to Noddle (and these are likely to be used for one off verification only and not stored; the CSV will never be stored if the business is PCI compliant, which Noddle will certainly be).

I think the overriding points you need to drive home to her are that she should always be suspicious if she receives a call she is not expecting and that banks never need a customer's help to access an account or secure their money in the event of fraud.

Figgerty

colsten wrote: »

Which could explain why Noddle didn't find her.

What name(s) does she use with her bank(s) and on the ER?

If she is normally known as Mary Smith, Noddle won't know it's her when she says her name is Mary Anne Mabel Smith.

:hello: Her first name happens to be Anne and she is the only one at her address. But on some of her post it is spelt Ann. She never bothered to correct them. The Noddle registration asked for any middle names and as I don't know the sources they check I put the full name recorded on her birth certificate. The bank only use the first name.

The end result is she has to write to them requesting a copy of her credit report and enclosing a £2 cheque. So with all the technology it comes down to doing things the was she always did, a postal application. I did not get answers to the names issue or removing her data from their system.

I would love to meet Dido Harding to tell her of the problems caused by her inability to secure our data and that is before any fraudulent activity has taken place. I sent her an email to tell her but I suppose she is receiving many emails from her disgruntled customers

13 days after the cyber attack, all TT customers are still waiting for access to My Account to change their password. I and many others are also waiting to hear what, if any of our data has been stolen You have to keep checking the site for updates so can't really relax. The last update was on 30 October.

Perhaps I/we are over worrying. I'll try and relax with an effigy of Dido and a little pin. :mad: . :mad:

Thanks to all who replied to me with helpful suggestions. :wave:

colsten

Figgerty wrote: »

:hello: Her first name happens to be Anne and she is the only one at her address. But on some of her post it is spelt Ann.

Seriously, the smallest of differences in names (and addresses) can lead to problems. As far as a computer is concerned, Anne Smith is not the same person as Ann Smith, even if they share a birthday and address. If you do use different spellings of your name, you usually have the option to specify a "known as" name as well.

You also cannot expect the computer to make educated guesses when checking the ID of a person. What would Anne Smith say if a fraudster had been allowed to get into her account as Ann Smith, just because he knew a correct address? You'd be the first to be up in arms over it, and quite rightly so.