Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[broadstairs]

Just had a news alert from the BBC about this see here.

Stuart

[jid]

Yes I also saw this on the news before TalkTalk informed me

Would be interested if it was the same vulnerability as the Carphone Warehouse website.

[Bowdon]

From the TalkTalk site: http://help2.talktalk.co.uk/oct22incident

From the BBC: http://www.bbc.co.uk/news/uk-34611857

[burakkucat]

So far I have not been contacted nor notified but noticed, this morning, that there was something ongoing with the lack of web-site access.

Currently the following is being displayed --

[burakkucat]

Apologies if the ordering of the posts to this thread seem to be a bit awry . . . I have done my best to merge two separate posts on the same topic.

Note to self: A merge will sort the posts from each thread into chronological order.

[sevenlayermuddle]

Currently it's the main headline on BBC news.  Outranks the goings-on in Syria, as well as the Chinese visit to UK.

Will be interesting to get some balanced reporting, once the dust has settled.

[Bowdon]

I wonder if Zen have a similar thing going on. I noticed these two stories broke at the same time. Or maybe that might be a co-incidence.

[phi2008]

TalkTalk, who I still have my mobile with, never bothered to inform me about their last customer details hack - found out by accident. I'm currently with BT who I think are pretty safe, every time a hacker tries to initiate a TCP connection they are redirected to India and put in a queue for at least 20 minutes...at which point they lose interest and give up. 

[broadstairs]

Well I have been informed this morning about this attack BUT I never received any emails from TT on the previous occasions. The CEO was on the news this morning saying they are setting up free credit checking for 12 months for all customers to enable them to more easily keep a check on their  credit cards etc, announcement later today. Probably will mean even more scam phone calls!

Stuart

[guest]

I see TT are trying to tick all the "bad guys" boxes by spinning that it was "Russian Islamists" and hopefully deflect attention from the fact that they did NOT comply with PCIDSS requirements and encrypt card data.

Hopefully (as they're now permitted in the UK) somone will bring a class action against TT for negligence. Not a fan of parasitical solicitors but this is a case which needs to be started.

Oh and if the "free credit checking" is with Experian then you might want to ask what's the point of that as Experian has been hacked for the last 2 years! (http://www.t-mobile.com/landing/experian-data-breach.html).

Suing the company is the only way to go on this as the ICO is (deliberately) as much use as a chocolate teapot.

[ricke17]

TT will just use the blame culture without admitting it's fundamental faults.

I just hope that all the other ISP's learn from this and comply with the PCIDSS requirements (if they don't already).

I have this morning deleted my card details from my plusnet account (which is used as a back up in case my DD fails) just in case!

[sevenlayermuddle]

The first words on BBC News website are still 'TalkTalk', in large bold font.  It outranks a story further down the page about 40 people killed in a coach crash which is France which is pretty poor judgement by Beeb IMHO.

The Beeb article might even be seen as free publicity.  Most people who are not TT customers will probably just skim over it.  In 6 months time they might vaguely remember that TT were in the news, but  won't even remember whether the story was about a good thing or a bad thing.   

[sheddyian]

There's a small sample of the hacked information that's been posted online, seemingly showing password changes but also bank account details (redacted for the sample post) - this does seem to indicate that the data stolen wasn't encrypted, or was easy to break.

On a related note, I'm signed up (free) with a service called "Have I been pwned?" where you can enter your email address(es), and it will tell you if you are on any known hacked database lists.  It also notifies you by email if you appear on a new list.

Might be worth a look?

The site is https://haveibeenpwned.com/ and you can read about it in this short article by security blogger Graham Cluley here https://grahamcluley.com/2013/12/check-youre-victim-database-breach-pwned/

So it seems legit.

Ian

[guest]

The first words on BBC News website are still 'TalkTalk', in large bold font.  It outranks a story further down the page about 40 people killed in a coach crash which is France which is pretty poor judgement by Beeb IMHO.

I'm the last person to defend the BBC (my opinion of them is unprintable) but I reckon a story affecting 4 million people in the UK outweighs a coach crash in another country, despite the deaths. A lot of TT customers have no clue at all about the previous (unrelated - pull the other one Dido, its got bells on) hacks over the last year as well.

I reckon TT are toast inside 12 months. This is going to cost the banks/CC companies loads of cash and you can bet your last penny they're not going to take that lightly - several pounds of financial flesh will be extracted one way or another. As for trust issues with customers - well they're out the window now anyway, you'd have to be delusional to trust them again.

[broadstairs]

Just seen a thread on the TT community forum with a list of databases which were compromised, obviously dont know how accurate it is but it is 64 databases long!
Dont know how long it will be there but I copied it just in case 

Stuart