Cable Forum - Carphone Warehouse in customer data breach

Cable Forum (https://www.cableforum.uk/board/index.php)

- Current Affairs (https://www.cableforum.uk/board/forumdisplay.php?f=20)

- - Carphone Warehouse in customer data breach (https://www.cableforum.uk/board/showthread.php?t=33701209)

Hugh	08-08-2015 16:04

Carphone Warehouse in customer data breach

http://www.bbc.co.uk/news/uk-33835185

Quote:

Personal details of up to 2.4 million Carphone Warehouse customers may have been accessed in a cyber-attack, the mobile phone retailer says.

Up to 90,000 customers may also have had their encrypted credit card details accessed, it said in a statement.

While the vast majority of Carphone Warehouse customers are unaffected, the breach does concern some of the company's separately managed divisions.

The retailer's owner, Dixons Carphone, said it was very sorry for the attack.

The affected part of the company operates the OneStopPhoneShop.com, e2save.com and Mobiles.co.uk websites.

It also provides services to iD Mobile, TalkTalk Mobile, Talk Mobile and some Carphone Warehouse customers.

mrmistoffelees

08-08-2015 20:00

Re: Carphone Warehouse in customer data breach

The absolute morons

'You're security is very important to us '

If it was that important you would of had adequate security measures to ensure this didn't happen

Utter plums

denphone

09-08-2015 03:15

Re: Carphone Warehouse in customer data breach

They are quick enough to take peoples money but not quick enough to have decent security which any decent company should have.

Stephen

09-08-2015 10:19

Re: Carphone Warehouse in customer data breach

Well until this happened they thought their security was good enough.

Same can be said for any company that has been hacked over the last few years.

No matter the security, hackers will find a way.

Ignitionnet

09-08-2015 10:59

Re: Carphone Warehouse in customer data breach

They were holding some unencrypted passwords and these may have been compromised.

That is unacceptable.

---------- Post added at 11:59 ---------- Previous post was at 11:58 ----------

Quote:

Originally Posted by Stephen (Post 35792650)

No matter the security, hackers will find a way.

Networks are hard to break, people are easy. Compromise someone who has legitimate access and you're there.

Stephen

09-08-2015 19:59

Re: Carphone Warehouse in customer data breach

In that case all the security in the world is essentially useless.

Stuart

10-08-2015 10:30

Re: Carphone Warehouse in customer data breach

I think the problem is that businesses need something they can show as a result of investment . Security systems and procedures just aren't sexy enough that they can show them off. They don't have the same "wow" factor for customers in the same way as state of the art new stores do, and they don't generate profits (so won't be sexy for the shareholders or accountants). Put simply, they work (in which case your business works as it should) or they don't, in which case your business may be in trouble.

As such, the companies tend to invest less than they should in decent security procedures and systems.

The same statements apply to backups. People forget about them until they are needed, by which time, if they aren't working, it's probably too late.

That's not a defence for CPW. They are storing customer's personal details. As such, they *should* have strong security in place, and they have failed in this respect.

All times are GMT. The time now is 09:39.