BBC Clickety

I wonder if this will finally convince my Dad that just because it's cheap doesn't mean it's good.

Why do these companies never have all this sort of data encrypted.

They should. And they may well do so, but if the system that accesses the data (not just the database itself) isn't properly secured, the hackers can get access to e.g. cert files & etc that make decryption much easier. That and the fact anyone can now hire cloud CPU time to do the decryption..

TalkTalk cyber-attack not as bad as first thought, company says | Business | The Guardian
http://www.theguardian.com/business/201 ... cybercrime

This is remarkably similar to other attacks where a company takes it's sweet time in telling customers, has been hacked many times before and still hasn't learned, and then claims it's not as bad as previously thought when the story refuses to go away

Their CEO didn't even know if customer details had been encrypted before she went on the radio!

TalkTalk boss says cybersecurity 'head and shoulders' above competitors | Business | The Guardian
http://www.theguardian.com/business/201 ... ompetitors

Talktalk charging customers up to £250 to leave

Now that's a well thought out strategy.

Four millions customers, £250 each. Job done!

And they hadn't encrypted user information, because they aren't legally obliged to do so.

You are not legally obliged to lock your doors when you go out, but I bet Dido does!

http://www.theregister.co.uk/2015/10/26 ... ption_dpa/

TalkTalk cyber-attack: boy, 15, arrested in Northern Ireland | Business | The Guardian
http://www.theguardian.com/business/201 ... rn-ireland

I'm actually surprised the government's getting involved.

I'm not, not really.
It's kinda TalkTalk's fault, really. After the last time this happened to the company (not all that long ago!) it should've assessed, and tightened, any possible security breaches, and that includes assessing any third-party companies that has access to customer data and how that is handled and stored.
I do now wonder if that kid has a guaranteed job when he leaves school.

Mark

In years to come, the way TalkTalk have mis-managed this whole PR disaster will become a case study of how not to do it!

I think, if I were a customer, I'd consider a class action (which I think are now legal in the UK) to at least get the 'fee to change' back. TT have a legal duty of care over the data they are given and failing to exercise that care could very easily one argued as breach of contract.

Personally if I was a customer I'd be wanting any exit fee waiving and also for TT to cover any connection charge with anew provider, especially given they're an unbundled provider so you'll presumably be stung by the Openreach reconnection fee if you want to move anywhere else.

Boy arrested over TalkTalk hacking sues newspapers for privacy breach | Business | The Guardian
http://www.theguardian.com/business/201 ... rs-privacy

Good. The papers have slowly been getting back to pre-Leveson activity. Though that's not to say Piggate wasn't a laugh
...

TalkTalk customer reported data breach as early as 2013 | Business | The Guardian
http://www.theguardian.com/business/201 ... ly-as-2013

Surely it's Santander's job to refund the customer and follow up with TalkTalk? That's certainly been the way with cnuts stealing my credit card details (and I'm 90% certain it was from within companies or at least those with contractors).

TalkTalk hack will blast a £35m hole in the company's coffers | TechRadar
http://www.techradar.com/news/internet/ ... rs-1308689





Meanwhile, they're changing that 'password' password at their end.