TalkTalk Cyber Attack information update

He has been held on suspicion of offences under the Computer Misuse Act, after the telecoms company’s website was hit by a cyber attack last week which affected its four million customers.

“[The] investigation is ongoing, but unfortunately, there is a chance that a few of the following data has been compromised: names, addresses, date of birth, phone numbers, email addresses, TalkTalk account information, credit card details and/or bank details”, the company said in a statement on Thursday (Oct. 22).

Moore said more worrying than the breach itself had been TalkTalk’s response to it.

“In the meantime, we advise customers to visit http://talktalk.co.uk/secure for updates and information regarding this incident”.

TalkTalk shares have slumped by a further 7% as investors digest the fallout from the cyberattack on the telecoms firm. It’s also unclear if the hacker who was arrested is the same person who claimed responsibility for the DDoS attack to Motherboard.

Meanwhile, Culture, Media and Sport Select Committee chair Jesse Norman suggested firms should be required by law to encrypt their customer’s data as it appeared TalkTalk had not. What annoys me is that they haven’t done anything since the last attack.

Professor Peter Sommer, from at De Montfort University’s cyber security unit, told Today: “It seems to me the suggestion that these are Islamic terrorists who are perpetrating it is unlikely, not impossible”.

BAE’s Applied Intelligence division spokeswoman said the company’s cyber specialists are analysing “vast quantities” of data to help establish how the breach took place and what information was stolen, according to the worldwide Business Times.

“It is the Great Train Robbery of the 21st century”, Aiden Culley, a former Metropolitan Police detective told the Sunday Times.

Talk Talk said it had contacted customers and was taking necessary measures to secure the website following the attack. “A search of the address is ongoing and enquiries continue”.

TalkTalk faces a maximum fine of £500,000 if the Information Commissioner’s Office (ICO) finds that the company did not adequately protect itself against hackers. “Whatever it does, the company is clearly anxious about the affect on its subscriber share, and rightly so given the high cost of customer acquisition and churn”.

The hackers did not obtain full card details and the bank account numbers and sort codes they did get are usually not enough to take money out of a bank account.