yes, that's the way I read it.

That's my understanding.

Hopefully that will make it clearer for anyone expecting a e-mail.

Very true

Nice concise post, although I wish people would not call them hackers It's a common and unfortunate perversion of the word. The same way pirates are not people who breach copyright, but people who board ships

Unfortunately there does seem to be a lot of confusion floating around.
The way I read it so far is:
If you don't get an email from the first batch then you never used to webmail service during the timeframe the hack occurred unlikely to be affected by the trojan.

The second batch of emails is along the lines of you didn't use webmail during the timeframe but have had you email address harvested hence the spam

And finally an email to everyone saying sorry, hopefully with this is what went wrong, this is what damage it has done and this is how we are going to manage the risk in the future.

Can I please please suggest that there is no spin and no 'we take your security seriously' mantras in this. There is enough misunderstanding and confusion around the issues here without marketing speak being added. Customers need a clear and open explanation of what has happened and what steps they can take to protect themselves. Nothing more, nothing less. Some of what has been sent out so far has only added to confusion.

I think this can be done without PlusNet looking stupid, admitting liability or even admitting their security problems, so what have the company got to lose.

In reply to:

---

If you don't get an email from the first batch then you never used to webmail service during the timeframe the hack occurred unlikely to be affected by the trojan.

---

Unfortunately not. Not everyone who used webmail while it was compromised were in the first batch. From reading other posts it appears there will be another set of emails going out to those people (We'll call it "1a").

I agree with your summary of the other emails.

The copy of the email was posted by me yesterday. Not a good email IMO. Secondly, they seem to be sticking to the notion that it was only a few customers that were potentially affected on 9 May when it is clear the problem was in place even as early as 5 May and maybe as late as 11 May.

In reply to:

---

Not everyone who used webmail while it was compromised were in the first batch. From reading other posts it appears there will be another set of emails going out to those people (We'll call it "1a").

---

I've just received an email - let's hope this has reached all affected customers now. It's good to see PlusNet acting quickly to make the most of a bad situation ....