Carphone Warehouse in customer data breach

**Hugh** · 08-08-2015, 16:04

http://www.bbc.co.uk/news/uk-33835185

Quote:

Personal details of up to 2.4 million Carphone Warehouse customers may have been accessed in a cyber-attack, the mobile phone retailer says.

Up to 90,000 customers may also have had their encrypted credit card details accessed, it said in a statement.

While the vast majority of Carphone Warehouse customers are unaffected, the breach does concern some of the company's separately managed divisions.

The retailer's owner, Dixons Carphone, said it was very sorry for the attack.

The affected part of the company operates the OneStopPhoneShop.com, e2save.com and Mobiles.co.uk websites.

It also provides services to iD Mobile, TalkTalk Mobile, Talk Mobile and some Carphone Warehouse customers.

mrmistoffelees · 08-08-2015, 20:00

The absolute morons

'You're security is very important to us '

If it was that important you would of had adequate security measures to ensure this didn't happen

Utter plums

denphone · 09-08-2015, 03:15

They are quick enough to take peoples money but not quick enough to have decent security which any decent company should have.

Stephen · 09-08-2015, 10:19

Well until this happened they thought their security was good enough.

Same can be said for any company that has been hacked over the last few years.

No matter the security, hackers will find a way.

Ignitionnet · 09-08-2015, 10:59

They were holding some unencrypted passwords and these may have been compromised.

That is unacceptable.

---------- Post added at 11:59 ---------- Previous post was at 11:58 ----------

Quote:

Originally Posted by Stephen

No matter the security, hackers will find a way.

Networks are hard to break, people are easy. Compromise someone who has legitimate access and you're there.

Stephen · 09-08-2015, 19:59

In that case all the security in the world is essentially useless.

Stuart · 10-08-2015, 10:30

I think the problem is that businesses need something they can show as a result of investment . Security systems and procedures just aren't sexy enough that they can show them off. They don't have the same "wow" factor for customers in the same way as state of the art new stores do, and they don't generate profits (so won't be sexy for the shareholders or accountants). Put simply, they work (in which case your business works as it should) or they don't, in which case your business may be in trouble.

As such, the companies tend to invest less than they should in decent security procedures and systems.

The same statements apply to backups. People forget about them until they are needed, by which time, if they aren't working, it's probably too late.

That's not a defence for CPW. They are storing customer's personal details. As such, they *should* have strong security in place, and they have failed in this respect.