TalkTalk cyber-attack: Website hit by 'significant' breach

[MickeyD]

Police are investigating a "significant and sustained cyber-attack" on the TalkTalk website, the UK company says.

The phone and broadband provider, which has over four million UK customers, said banking details and personal information could have been accessed.

TalkTalk said potentially all customers could be affected but it was too early to know what data had been stolen.

The Metropolitan Police said no-one had been arrested over Wednesday's attack but enquiries were ongoing.

TalkTalk said in a statement that a criminal investigation had been launched on Thursday.

It said there was a chance that some of the following customer data, not all of which was encrypted, had been accessed:

• Names and addresses
• Dates of birth
• Email addresses
• Telephone numbers
• TalkTalk account information
• Credit card and bank details

More here: http://www.bbc.com/news/uk-34611857

 

[MickeyD]

TalkTalk hush-hush on compo for up to 4 million customers after mega cyber attack

TalkTalk boss Dido Harding went from one Blighty news broadcaster to another on Friday, admitting that the budget telco had screwed up but declining to commit to compensating customers affected by the major criminal attack on its system.

The ex-jockey claimed that it was too early for TalkTalk to know the extent of the security breach and its direct impact on the ISP's four million subscribers.

She told Channel 4 News: "The worse case scenario is that all of our customers details have been stolen."

Harding added that "world class external experts" were sifting through "millions of lines of data [and] the millions of databases." But she later corrected that number to "literally hundreds of databases".

TalkTalk's boss admitted that the company had failed to spend enough money on cyber security, prior to the attack on its systems.

She claimed to Channel 4 News: "My judgement was that it was better to inform our customers early."

However, it was a different story a few days ago when The Register first asked TalkTalk about its mystery outage back on Wednesday. In fact, the firm was tight-lipped about what had gone wrong.

Harding also declined to comment on pay-outs to subscribers who may have had their data plundered – including the possibility of bank details and other personal information being nicked – following the attack.

More here: http://www.theregister.co.uk/2015/1..._harding_declines_to_talk_about_compensation/

 

[MickeyD]

TalkTalk attackers stole 'incomplete' customer bank data, ISP confirms

TalkTalk confirmed on Saturday afternoon that incomplete bank details were lifted by crims, even though its core systems were not targeted in the attack on its business earlier this week.

The budget telco said that its website had been plundered by malefactors.

However, TalkTalk claimed that complete credit card details of its customers had not been stored on the site.

"Any credit card details that may have been accessed had a series of numbers hidden and therefore are not usable for financial transactions, eg '012345xxxxxx 6789It'," it said in a statement.

More here: http://www.theregister.co.uk/2015/10/24/talktalk_attackers_stole_incomplete_customer_bank_data/

 

[The_Unbeliever]

I trust The Register more with IT news than any other site....