120M : Letter from Vm Security

[blackthorn]

I received a letter yesterday from the VM internet security dept saying that they`d had an alert that somebody other than myself had accessed the My Virgin media online account. It went on to say that its likely my email addy and password were taken from another site or service. Meanwhile they had put a temp block on my account until I phoned them up on 0800 052 9429.
I googled the number to make sure it was VM before I rang them and found that lots of other people had received the same letter or had texts sent to their phones to ring them, with links to the Vm forums, so it was genuine.
So anyway I rang them up, went through the usual security stuff and then I told the guy, actually my account was not blocked as I was looking at it as we spoke but he insisted that I change the password with him there and then over the phone.
So I did change it with him and we changed the security question as well. He then went on to say, thats it all done, your new password is all active and I`ve removed the flag from your account. So I then said to him, before you go, lets test that I can still get onto my account.I logged in with the new password we had agreed on and couldnt logon so I tried my old password and hey presto logged ok.
He said he couldnt understand what was wrong and insisted that my old password shouldnt work and then he went on to tell me that he had spoken to his colleagues and to give it 24 hours to change.
Today, 24 hours later, yep my old password is still working.

[Kushan]

Originally Posted by blackthorn

I received a letter yesterday from the VM internet security dept saying that they`d had an alert that somebody other than myself had accessed the My Virgin media online account. It went on to say that its likely my email addy and password were taken from another site or service. Meanwhile they had put a temp block on my account until I phoned them up on 0800 052 9429.
I googled the number to make sure it was VM before I rang them and found that lots of other people had received the same letter or had texts sent to their phones to ring them, with links to the Vm forums, so it was genuine.
So anyway I rang them up, went through the usual security stuff and then I told the guy, actually my account was not blocked as I was looking at it as we spoke but he insisted that I change the password with him there and then over the phone.
So I did change it with him and we changed the security question as well. He then went on to say, thats it all done, your new password is all active and I`ve removed the flag from your account. So I then said to him, before you go, lets test that I can still get onto my account.I logged in with the new password we had agreed on and couldnt logon so I tried my old password and hey presto logged ok.
He said he couldnt understand what was wrong and insisted that my old password shouldnt work and then he went on to tell me that he had spoken to his colleagues and to give it 24 hours to change.
Today, 24 hours later, yep my old password is still working.

Not sure what has happened, it's possible the agent made a mistake or Virgin's systems are playing catch up. My advice to you would be to log in and change the password through the site. I'd never change it over the phone.

[blackthorn]

Yea I have done that now thanks. I just thought it a bit odd really that quite a few people have received similar letters and texts all dated the same, saying the same thing.
Another paragraph says " ......In this particular case, there`s no reason to believe Virgin Medias systems were breached but we`re working with the relevant authorities and investigating"
somebodys systems have been breached, I wonder if we`ll find out whose.

[Kushan]

Originally Posted by blackthorn

Yea I have done that now thanks. I just thought it a bit odd really that quite a few people have received similar letters and texts all dated the same, saying the same thing.
Another paragraph says " ......In this particular case, there`s no reason to believe Virgin Medias systems were breached but we`re working with the relevant authorities and investigating"
somebodys systems have been breached, I wonder if we`ll find out whose.

Well here's a question - the password and email you used to use, did you use the same combination anywhere else? There's your list of candidates.