This article is from the source 'bbc' and was first published or seen on . It last changed over 40 days ago and won't be checked again for changes.
You can find the current article at its original source at http://www.bbc.co.uk/news/uk-34622754
The article has changed 14 times. There is an RSS feed of changes available.
Version 11 | Version 12 |
---|---|
TalkTalk attack: 'Urgent action needed' on cyber-crime | TalkTalk attack: 'Urgent action needed' on cyber-crime |
(35 minutes later) | |
Business leaders have called for urgent action to tackle cyber-crime after an attack on TalkTalk, calling it one of the biggest threats facing companies. | Business leaders have called for urgent action to tackle cyber-crime after an attack on TalkTalk, calling it one of the biggest threats facing companies. |
The Institute of Directors (IoD) said only "serious breaches" made the headlines, but attacks on British businesses "happen constantly". | The Institute of Directors (IoD) said only "serious breaches" made the headlines, but attacks on British businesses "happen constantly". |
The government said it was "committed to tackling cyber-crime". | The government said it was "committed to tackling cyber-crime". |
A number of TalkTalk customers have complained that their bank accounts or credit cards were targeted. | A number of TalkTalk customers have complained that their bank accounts or credit cards were targeted. |
However, no losses have so far been confirmed as being directly attributable to the attack on the phone and broadband services provider. | |
One customer, Hilary Foster, told the BBC she had lost £600 from her account, which the bank said it would refund. | One customer, Hilary Foster, told the BBC she had lost £600 from her account, which the bank said it would refund. |
"I'm still very angry [about] the fact that my details are potentially out there somewhere on the internet and I'm going to have to keep checking my bank statements now for a long time," she said. | "I'm still very angry [about] the fact that my details are potentially out there somewhere on the internet and I'm going to have to keep checking my bank statements now for a long time," she said. |
Freeview box | |
Another customer, Barbara Manley, said she and her husband had lost £9,000 from their bank account on Wednesday, after being contacted by a caller purporting to be from TalkTalk last Sunday and then again on Tuesday. | |
"They appeared to know all about us and asked my husband to start the computer up and it went on from there," she said. "It all seemed so genuine." | |
Mrs Manley's daughter, Sarah, said the timings suggested TalkTalk "knew about this for some time and didn't warn" customers. | |
She said that when her father contacted TalkTalk to complain the company apologised and sent him a Freeview box. | |
TalkTalk said it was investigating customer queries and complaints on a case-by-case basis and was not commenting on individual cases at this stage. | |
It said fraud suffered by its customers "may not be the result of the cyber attack on Wednesday". | |
The Metropolitan Police says it is in the early stages of investigating the hacking as well as a ransom demand from a group purporting to be behind the attack. | The Metropolitan Police says it is in the early stages of investigating the hacking as well as a ransom demand from a group purporting to be behind the attack. |
No arrests have been made. | No arrests have been made. |
'Deafening silence' | 'Deafening silence' |
News of the reported losses suffered by customers comes two days after TalkTalk said it had been subject to a cyber-attack in which the personal and banking details of up to four million of its customers may have been accessed by hackers. | |
The company has said it does not know how much of the customer information was encrypted. | The company has said it does not know how much of the customer information was encrypted. |
Cyber-crime consultant Adrian Culley told BBC Breakfast the hackers had obtained "high-value" data and it was "going to take time to fully investigate" the attack. | Cyber-crime consultant Adrian Culley told BBC Breakfast the hackers had obtained "high-value" data and it was "going to take time to fully investigate" the attack. |
He said he had already seen online what "very much appears to be genuine" TalkTalk customer bank details. | He said he had already seen online what "very much appears to be genuine" TalkTalk customer bank details. |
He said those who uploaded the data had redacted account numbers but published customers' bank sort codes. | He said those who uploaded the data had redacted account numbers but published customers' bank sort codes. |
A number of TalkTalk customers have told the BBC they are unhappy about the company's response to the attack. | |
Several said TalkTalk was failing to keep them informed about what had happened and what it was doing about it. "The silence is deafening," one customer, Frank Wilde, said. | Several said TalkTalk was failing to keep them informed about what had happened and what it was doing about it. "The silence is deafening," one customer, Frank Wilde, said. |
Others said they had lost confidence in the company and complained about its refusal to waive early-exit charges for those who wished to end contracts early because of the attack. | Others said they had lost confidence in the company and complained about its refusal to waive early-exit charges for those who wished to end contracts early because of the attack. |
TalkTalk chief executive Dido Harding told the BBC on Friday: "Waiving standard terms and conditions is not something sensible I can do today." | TalkTalk chief executive Dido Harding told the BBC on Friday: "Waiving standard terms and conditions is not something sensible I can do today." |
The company said it would consider requests on a case-by-case basis later when more information was known. | The company said it would consider requests on a case-by-case basis later when more information was known. |
'Scourge' | 'Scourge' |
Former home office minister Hazel Blears said the TalkTalk data breach was "a wake-up call". She said it should prompt a debate about whether further regulation was needed "because this is probably the biggest threat to our economy". | Former home office minister Hazel Blears said the TalkTalk data breach was "a wake-up call". She said it should prompt a debate about whether further regulation was needed "because this is probably the biggest threat to our economy". |
IoD senior corporate governance adviser Oliver Parry urged the police to make cyber-crime an "urgent priority and investigate theft of data just as it would theft of physical property". | IoD senior corporate governance adviser Oliver Parry urged the police to make cyber-crime an "urgent priority and investigate theft of data just as it would theft of physical property". |
He said companies should review risks regularly to "ensure they know where the potential threats are coming from and are prepared in case the worst happens". | He said companies should review risks regularly to "ensure they know where the potential threats are coming from and are prepared in case the worst happens". |
BBC technology correspondent Rory Cellan-Jones said TalkTalk had apparently fallen victim to a simple hacking trick known as an SQL injection, which it should have been able to protect against. | BBC technology correspondent Rory Cellan-Jones said TalkTalk had apparently fallen victim to a simple hacking trick known as an SQL injection, which it should have been able to protect against. |
TalkTalk said it could not confirm this was the technique used. | TalkTalk said it could not confirm this was the technique used. |
What should you do if you think you're at risk? | What should you do if you think you're at risk? |
TalkTalk hack: What should I do? | TalkTalk hack: What should I do? |
Labour MP Keith Vaz, chairman of the Home Affairs Select Committee, told the BBC he would be writing to TalkTalk chairman Sir Charles Dunstone to ask for a "timeline as to what they did" when the attack was discovered. | Labour MP Keith Vaz, chairman of the Home Affairs Select Committee, told the BBC he would be writing to TalkTalk chairman Sir Charles Dunstone to ask for a "timeline as to what they did" when the attack was discovered. |
He said the company should have informed its customers "immediately" and said TalkTalk's explanation that it had done so within 36 hours "would not be regarded by the public as acceptable". | He said the company should have informed its customers "immediately" and said TalkTalk's explanation that it had done so within 36 hours "would not be regarded by the public as acceptable". |
The company has said its website is now secure again, and that TV, broadband, mobile and phone services were not affected by the attack. | The company has said its website is now secure again, and that TV, broadband, mobile and phone services were not affected by the attack. |
However, the sales website and "my account" services are still down, despite the company having hoped to restore them on Friday. | However, the sales website and "my account" services are still down, despite the company having hoped to restore them on Friday. |
TalkTalk said there was a chance that some of the following customer data had been accessed: | TalkTalk said there was a chance that some of the following customer data had been accessed: |
This is the third time this year that TalkTalk has been targeted by hackers. | This is the third time this year that TalkTalk has been targeted by hackers. |
In August, the company revealed its mobile sales site had been targeted and personal data breached. | In August, the company revealed its mobile sales site had been targeted and personal data breached. |
And in February, TalkTalk customers were warned about scammers who had managed to steal thousands of account numbers and names. The attacks are understood to be unrelated. | And in February, TalkTalk customers were warned about scammers who had managed to steal thousands of account numbers and names. The attacks are understood to be unrelated. |
Google and McAfee estimate there are 2,000 cyber attacks every day around the world, costing the global economy about £300bn a year. | Google and McAfee estimate there are 2,000 cyber attacks every day around the world, costing the global economy about £300bn a year. |
Are you a TalkTalk customer? If you have any information to share with the BBC, you can email haveyoursay@bbc.co.uk. | Are you a TalkTalk customer? If you have any information to share with the BBC, you can email haveyoursay@bbc.co.uk. |
Please include a contact number if you are willing to speak to a BBC journalist. You can also contact us in the following ways: | Please include a contact number if you are willing to speak to a BBC journalist. You can also contact us in the following ways: |
Or use the form below | Or use the form below |