Virgin Media Reports Data Incident

guest · Mar 5, 2020

Virgin Media Reports Data Incident
March 5, 2020
https://www.cdrinfo.com/d7/content/virgin-media-reports-data-incident

Virgin Media on Thursday reported a breach that allowed unauthorized access to the cable company’s database that contained personal information of about 900,000 customers.

Lutz Schüler, CEO of Virgin Media said: “We recently became aware that one of our marketing databases was incorrectly configured which allowed unauthorised access. We immediately solved the issue by shutting down access to this database, which contained some contact details of approximately 900,000 people, including fixed line customers representing approximately 15% of that customer base. Protecting our customers’ data is a top priority and we sincerely apologise."

The commpany said that the database did not include any passwords or financial details, such as credit card information or bank account numbers, but did contain limited contact information such as names, home and email addresses and phone numbers.

“We are now contacting those affected to inform them of what happened. We urge people to remain cautious before clicking on an unknown link or giving any details to an unverified or unknown party," the company said.
Click to expand...

Virgin Media: Virgin Media's data incident - Help and Advice

guest · Mar 6, 2020

Virgin Media 'likely to face maximum GDPR fine' following data leak
March 7, 2020
https://www.itpro.co.uk/security/da...to-face-maximum-gdpr-fine-following-data-leak

Virgin Media has notified the Information Commissioner's Office (ICO) that data belonging to over 900,000 customers has been accessed by an unauthorised third party, the company confirmed on Thursday.

Although investigations have only just begun, Jonathan Compton, UK compliance lawyer and partner at DMH Stallard, argues that, given what we know so far, Virgin Media could face serious sanctions under GDPR, which sets fines at a maximum of 4% of global turnover, or €20 million.

"It is important to note that this was not a case of a secure database being hacked. No, this was an “error by a member of staff not following correct procedures," said Compton. "Fines towards the maximum of the applicable Act are likely," he added. "This was a serious breach, over a long period, affecting nearly 1m people.
In its email to customers, seen by IT Pro, Virgin said it was aware there had been a leak of information and that it has taken immediate steps to shut down access to the databases. The company also said it had launched a "full independent forensic investigation" into the incident and has also notified the Information Commissioner's Office.
Click to expand...

One issue that may be investigated closely is whether the company was justified in its retention of user data from prospective customers who may have only expressed an interest in using the company's services but never initiated a contract.
Click to expand...

guest · Mar 6, 2020

Virgin Media breach 'linked customers to porn'
March 6, 2020
https://www.bbc.co.uk/news/technology-51768577

The researchers who first discovered the database told the BBC that it contained more information than Virgin Media suggested.
Such details could be used by cyber-criminals to extort victims.

However, researchers at cyber-security firm TurgenSec - which found the database - said it contained more intimate details.

"Stating to their customers that there was only a breach of 'limited contact information' is from our perspective understating the matter potentially to the point of being disingenuous," one researcher told the BBC.
A representative of TurgenSec said Virgin Media's security had been far from adequate.
"The information was in plain text and unencrypted, which meant anyone browsing the internet could clearly view and potentially download all of this data without needing any specialised equipment, tools, or hacking techniques," they told the BBC.
Click to expand...

A spokeswoman for the ICO said it was investigating, and added: "People have the right to expect that organisations will handle their personal information securely and responsibly. When that doesn't happen, we advise people who may have been affected by data breaches to be vigilant when checking their financial records."
Click to expand...

guest · Mar 30, 2020

Virgin Media Facing Huge Compensation Bill Over Data Breach
March 27, 2020
https://www.infosecurity-magazine.com/news/virgin-media-compensation-data/

Virgin Media could be liable to pay up to £4.5bn in compensation following the company’s data breach, in which the details of 900,000 customers were freely available online for hackers to exploit for 10 months.
This has left the victims vulnerable to scams including phishing emails, account takeovers and identity theft, with the resulting compensation claims for financial and emotional distress suffered expected to be around £5000 per claimant.

Aman Johal, director at Your Lawyers, the legal firm supporting those affected in taking action, stated: “Virgin Media failed to take the steps required to keep customer data safe. It is vital for the company to understand the severity of this breach. When data is left exposed online it is open season for fraudsters to scam and attack vulnerable people. Your Lawyers has formally notified Virgin Media that we are taking action and our claimant base is growing daily. We urge anyone affected by the breach to make a claim as soon as possible.”
It is believed that Virgin Media could be facing other financial costs as a result of its mistake, in the form of a large GDPR fine.
Click to expand...

Log in or Sign up

Virgin Media Reports Data Incident

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

Virgin Media Reports Data Incident

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches