Full statement on Talktalk attack

The investigation is ongoing, but unfortunately there is a chance that some of the following data may have been accessed:

Names
Addresss
Dates of birth
Email addresses
Telephone numbers
TalkTalk account information
Credit card details and/or bank details

Edited by deleted (Fri 23-Oct-15 13:23:06)

In reply to a post by hypertony:

Their FAQ states that not all data are encrypted, but did not state which one.

Edited by arfster (Fri 23-Oct-15 14:10:49)

In reply to a post by arfster:

PR speak for "nothing was encrypted."

In reply to a post by bobble_bob:

So how does that work? Give us 10 million and you can have your data back. What's stopping them from copying the data and releasing it anyway. Must be stupid if they think TT will pay it. Doesn't stop the data being released

Edited by deleted (Sat 24-Oct-15 00:36:36)

Edited by bobble_bob (Fri 23-Oct-15 18:21:55)

Statement To: Th3 W3b 0f H4r4m ~

We Have adapted To The Security measures Of The Web,, We Cannot Be Stopped. We Have Made Our Tracks Untraceable Through Onion Routing, Encrypted Chat Messages, Private Key Emails, Hacked Servers. We Will Teach our Children To Use The Web For Allah.. Your Hands Will Be Covered In Blood.. Judgement Day Is Soon

Your One Childrens Name Is Mohammed. Your Women Are being Taken Over By Us. Your Children are being Killed By Us For Being [censored] On Earth.

WE Are In The Soviet Russia And Near Place, Your Europe, WE control Asia, We Control AMERICA

Here Is Example Info.. To Prove:
[...snipped....]

Edited by deleted (Sat 24-Oct-15 00:24:05)

In reply to a post by bobble_bob:

Im on the Talk Talk Business network but luckily with a reseller Pulse8 so safe

In reply to a post by edwincluck:

Gotta love the phony Islamist message from the alleged hackers -- Allah Akbah indeed.

From http://community.talktalk.co.uk/t5/Discussion-Area/P... :--

Statement To: Th3 W3b 0f H4r4m ~

We Have adapted To The Security measures Of The Web,, We Cannot Be Stopped. We Have Made Our Tracks Untraceable Through Onion Routing, Encrypted Chat Messages, Private Key Emails, Hacked Servers. We Will Teach our Children To Use The Web For Allah.. Your Hands Will Be Covered In Blood.. Judgement Day Is Soon

Your One Childrens Name Is Mohammed. Your Women Are being Taken Over By Us. Your Children are being Killed By Us For Being [censored] On Earth.

WE Are In The Soviet Russia And Near Place, Your Europe, WE control Asia, We Control AMERICA

Here Is Example Info.. To Prove:
[...snipped....]

Who writes this rubbish?!

In reply to a post by bobble_bob:

Pulse8 confirmed only basic info is passed to TT in order for them to migrate the line. They later emailed me saying TT have confirmed to them no Pulse8 customer data was breached and only residential customers are effected

In reply to a post by knicol46:

If you want to leave TalkTalk due to them exposing your personal data which is probably now circulating the internet then there should be no charge to leave even if in contract - this is the least they should offer customers.

If they do attempt do charge make sure you tell the national press as that's the only way they listen.

for things like changing bank account details

In reply to a post by MrSaffron:

No idea if this was/is the case with TalkTalk as so long ago since I had one of their lines that I've forgotten, but maybe they use the credit/debit card for the initial transaction and then direct debit for ongoing charges.

In reply to a post by MrSaffron:

There was also the option for early payment discount, so many may have been using cards for that.

Edited by Oliver341 (Sat 24-Oct-15 15:56:14)

In reply to a post by bobble_bob:

Like you say a very strange idea whats in it for TT?

make sure you tell the national press as that's the only way they listen.

It also emerged that on Wednesday (21 October) before details about the hack became known, Ian Frater, a trainee doctor from Glasgow, believes his broadband was hijacked and he then spoke to someone he believes was a hacker. "They slowed my internet down � which I imagine could be a denial-of-service attack or something � then phoned pretending to be TalkTalk support, who were being proactive in helping their customers," said Frater. "They had all the details you would expect TalkTalk to have at hand, including name, address, phone number and TalkTalk account number. The guy really sounded like he was in a TalkTalk call centre."

Donna Kinnear, from Dingwall in Scotland, actually tweeted that she had been targeted before TalkTalk revealed the cyber attack had taken place. She praised her bank, Santander, for blocking the hack, writing: �Some a****** hacker tried to purchase something using my bank details. Ha ha thanks to Santander he got f*** all. Thieving ***.� Ms Kinnear later tweeted that she believed she had her �identity stolen� in the raid on TalkTalk�s databases and, like Ms Foster, was critical of the company�s response. She said: �Can�t get through to them or the fraud squad. Don�t know what to do.�

The attack was on TalkTalk�s website and not its core systems, the London-based company said Saturday in an e-mailed statement. �We now expect the amount of financial information that may have been accessed to be materially lower than initially believed,� TalkTalk said.

Edited by deleted (Sat 24-Oct-15 21:03:56)

In reply to a post by edwincluck:

In the Pastebin "Message from TalkTalk Hackers" we count less than 100 compromised customer records; none with identifiable bank details. But, get this -- maybe they weren't even real customer records??

There are also some Unix timestamps in there e.g. 1311343301 = Fri, 22 Jul 2011 14:01:41 UTC
So why would they show data that is over 4 years old? Surely they would use current data to show how powerful and recent they are. It looks like some user data and some registration journal stuff. Maybe they didn't hack it at all, and the hacker has shown them old data that was nabbed years ago (probably when Tiscali and TalkTalk merged) and did a DDoS attack to get themselves noticed.

Edited by deleted (Sun 25-Oct-15 17:55:38)

In reply to a post by edwincluck:

The provider has none of the broadcast nor broadband infrastructure that Sky, BT and Virgin can boast. Turning it more into a virtual provider; just another ISP piggy-backing on BT's monopoly MSAN kit in the street.

Edited by deleted (Sun 25-Oct-15 20:15:17)

In reply to a post by baby_frogmella:

Eh? TalkTalk has the largest IP network backbone in the country bigger than that of BT & Sky, as proven by 96% of exchanges having TalkTalk ADSL2+ availability. Quite often TalkTalk will LLU exchanges which BT & Sky won't touch with a bargepole wrt bringing their own IP network to it, so TalkTalk is far from a virtual ISP. The same backhaul used for TalkTalk ADSL2+ services is also used for Talktalk FTTC services from the exchange > WWW.

"TalkTalk is set to face devastating losses of £75 million as the fallout from the cyber-attack on the network continues."

Investors are likely to be worried about the impact on its share price. The company has already been targeted by short sellers, which bet on share prices falling, such as Odey over worries about competition in the British broadband market.

Nearly 15 per cent of TalkTalk�s shares are on loan to short sellers, up from around 2 per cent a year ago, with Odey Asset Management and Ricky Sandler�s Eminence Capital among the hedge funds to disclose bets against the stock.

Edited by deleted (Mon 26-Oct-15 00:11:44)

In reply to a post by edwincluck:

Agree with your sentiment re: TalkTalk's expansive backhaul. But what value all that infrastructure?

In reply to a post by edwincluck:

If it can't attract more punters of its own - yet more of us fleeing in droves from the latest TalkTalk scandal -- contrived or otherwise -- what traffic left to route over those capacious backhauls?

In reply to a post by baby_frogmella:

In reply to a post by edwincluck:

The provider has none of the broadcast nor broadband infrastructure that Sky, BT and Virgin can boast. Turning it more into a virtual provider; just another ISP piggy-backing on BT's monopoly MSAN kit in the street.

Eh? TalkTalk has the largest IP network backbone in the country bigger than that of BT & Sky, as proven by 96% of exchanges having TalkTalk ADSL2+ availability. Quite often TalkTalk will LLU exchanges which BT & Sky won't touch with a bargepole wrt bringing their own IP network to it, so TalkTalk is far from a virtual ISP. The same backhaul used for TalkTalk ADSL2+ services is also used for Talktalk FTTC services from the exchange > WWW.

Edited by deleted (Mon 26-Oct-15 12:26:58)

Edited by deleted (Mon 26-Oct-15 14:34:41)

Edited by bobble_bob (Mon 26-Oct-15 19:48:35)

The media will get bored and have something else to sink their teeth into ...............

In reply to a post by Futaura:

Am I the only one to feel sorry for TalkTalk?

no banking details were taken that you won�t already be sharing with people when you write a cheque or give to someone so they can pay money into your account.

TalkTalk My Account passwords had not been infiltrated. TalkTalk also said it did not store complete credit card details on the website. A spokesman said: �Any credit card details that may have been accessed had a series of numbers hidden.�

The European telecoms sector�s hopes for more consolidation took a blow last week after the EU�s digital commissioner backed more competition instead of more deals.

In his first significant statement on the telecoms sector, Andrus Ansip said that �axing competition rules is not the answer�.

He told an audience of industry executives and analysts at the Financial Times-Etno telecoms conference last week that this �would only shift the cost of the networks on to consumers. They would have less choice and higher prices. It would be the opposite of what we want�.

It was a stunning rebuke for an industry that had been making the case for in-market consolidation, promising greater investment in next generation networks.

John Strand, a telecoms analyst, said the speech [of 13 Oct by Digital Commissioner Andrus Ansip] underscored that the future of the continent�s telecoms market would be dictated by Margrethe Vestager, the EU�s competition chief.

�The only voice that is being perceived outside Brussels, in the market and in public opinion, is Ms Vestager�s voice,� said St�phane Richard, chief executive of Orange. �So we can probably deduce from that she has the power.�

Ms Vestager has already put down a marker, standing firm against a proposed merger of the Danish units of Telenor and Telia.

Executives had been trying to convince each other that the Denmark case was a one-off. Indeed, Ms Vestager has been keen to stress that every case will be assessed on its own merits. But Mr Ansip�s talk made clear that competition rather than consolidation would have to be the driver of future investment.

Edited by deleted (Tue 27-Oct-15 02:19:09)

In reply to a post by edwincluck:

The media is waging a hysterical and malicious campaign with one objective: to damage TalkTalk. ... Doubtless that share collapse is in part if not wholly due to the handiwork of the hedge funds -- manipulating the share price for their own private gain.

Edited by richi (Tue 27-Oct-15 11:03:00)

In reply to a post by richi:

Edwin, hope you don't mind me quoting your well-written theory in my Computerworld column.

© Copyright 2000-2014. All rights reserved. Unauthorised reproduction prohibited - Privacy Policy | Cookies | About

In reply to a post by BatBoy:

Can I draw your attention to the copyright notice at the bottom of this page ?

might not fair this storm

In reply to a post by BatBoy:

It needs a bit of tidying-up for publication

might not fair this storm

In reply to a post by MrSaffron:

So long as credit and preferably a link is given we don't mind links and quotes.

In reply to a post by BatBoy:

It needs a bit of tidying-up for publication

In reply to a post by mlmclaren:

So apparently the details are now up for sale on the dark web!

Edited by mlmclaren (Wed 28-Oct-15 12:30:01)

Morgan Stanley warned that customer growth at the broadband provider was likely to turn negative and margin guidance for the next financial year looked a stretch. Its survey suggested TalkTalk was losing market share to Sky even before the hack.

Reputational damage meant TalkTalk would struggle both to attract customers and raise prices for its existing base, after two tariff increases in 12 months, Morgan Stanley told clients in an overnight note.

Gavin Patterson, BT�s chief executive, welcomed the decision [by the CMA] saying the merger would increase investment and innovation.

But TalkTalk said it was �concerned� by the findings, noting that the watchdog was �divided over its findings in wholesale mobile�.

Kester Mann, an analyst at CCS Insight, said the fact that BT will not be required to make any changes to its offer to soothe competition concerns was a �particular victory for the company�. But he added that the approval would add weight to calls by rivals for a structural separation of Openreach, its fixed-line broadband network which provides services to rivals as well as BT�s retail operation. The issue is being considered as part of a review of the UK�s digital economy by Ofcom, the telecoms regulator.

Edited by deleted (Thu 29-Oct-15 07:03:23)

Edited by deleted (Wed 28-Oct-15 22:03:34)

In reply to a post by bernado:

So much for an organised jihadist attack, a fifteen year old boy in [Ulster] has just been arrested

Edited by deleted (Thu 29-Oct-15 06:57:19)

In reply to a post by dsergeant:

Yes, it does seem a media led campaign to discredit TalkTalk. (not a TalkTalk customer by the way, I am with Sky thanks to the O2 takeover).

In reply to a post by Skilty:

As for speculative trading, no law against it as long as you are not manipulating the price of the stoc.

In reply to a post by Skilty:

If trading firm A wanted to short a position in company B, employed a hacker to initiate a DDOS attack and a data breach to then trade off the back of the ensuing stock market price drop I think they would be going to prison for quite some time.

In reply to a post by edwincluck:

What's often true in these financial hoaxes - or 'psyops' as they call them - if indeed this is a hoax - is that the hoaxers aim, where possible, to stay within the spirit of the law. Just in case they are rumbled, and the whatnot 'hits the fan'. They don't actually need to hack TalkTalk system to create mass panic and hysteria. They just create that impression; by using complicit associates in the crooked media to "report" on a successful hack, when in fact there was none... And if ever finding themselves grilled over their activities - they can just point to the "stolen" data as being faked, or based on data already published online any way.

Edited by deleted (Fri 30-Oct-15 06:25:09)

Market manipulation is a deliberate attempt to interfere with the free and fair operation of the market and create artificial, false or misleading appearances with respect to the price of, or market for, a security, commodity or currency.

In reply to a post by edwincluck:

....like the recent theft of records at HMCE / DWP?

In reply to a post by edwincluck:

Huh?! That's exactly what short-selling is about. It relies on rumour-mongering in the press to manipulate the stock price.

In reply to a post by Skilty:

Sophos merely capitalised on something that was inevitable.

[O]n Friday the company said the damage was less than expected. It said the hackers accessed less than 21,000 bank account numbers, less than 15,000 customer birth dates and less than 1.2 million customer email addresses, names and phone numbers. The company also said hackers got hold of incomplete credit card details for [less than?] 28,000 customers."

Edited by deleted (Fri 30-Oct-15 20:39:05)

Still reckoning here that TalkTalk insiders are players too in this seedy stock-bashing scam. In league with the short-sellers; profiteering from 'doing a Ratner' of their own!

In reply to a post by Skilty:

Apologies for the typo it was late and I was rather tired and working on a Sophos UTM at the time.

Edited by deleted (Fri 30-Oct-15 23:11:15)

In reply to a post by BatBoy:

Yes, I can't see how encrypting the database would be a waste of time. If it were, several financial institutions need to be informed without delay

Discussions about TalkTalk�s unencrypted databases and at least 11 so-called cross-site scripting vulnerabilities took place on online forums used by hackers weeks before the actual attack on the company was announced.

Edited by deleted (Sat 31-Oct-15 07:40:19)

Mobile payments company Optimal Payments revealed details of historic cyber attacks
..
Elliott Wiseman, Optimal�s general counsel and chief compliance officer, said the company was investigating.. how many customers had been affected.
..
Optimal has not contacted customers to inform them of the breaches. Mr Wiseman said �we are taking advice and considering exactly what needs to be done with respect to those potentially impacted.� He stressed that �it is too early to say what we will need to do.�
..
Mr Wiseman said the breaches were not previously announced because investigations at the time found insufficient evidence that the hackers accessed large amounts of data.

NETBANX processes online and telephone financial transactions for a range of industries, including government bodies, universities, insurance companies, small and large businesses. NETBANX's customers include: the UK government's business registration agency, Companies House and Environment Agency, Shop Direct Group and npower.

Mr Patterson played down speculation that a recent cyber attack on smaller rival TalkTalk would benefit BT by encouraging customers to move to new providers. �It�s not good for TalkTalk, but it�s not good for the industry as a whole,� he said of the hack.

Edited by deleted (Mon 02-Nov-15 06:15:53)

In reference to www.telegraph.co.uk/finance/newsbysector/mediatechnologyandtelecoms...:

...
From a brand perspective, one has to wonder whether the TalkTalk brand can survive as it is.
..
Given the consolidation that has already taken and is taking place in the telecoms sector, the potential for a takeover of TalkTalk now from one of the sector�s biggest beasts has to be high.

Clearly such a deal could not happen without the backing of Sir Charles [Dunstone] and fellow Carphone founder David Ross, who owns a 12pc stake in TalkTalk.

But, despite Wednesday�s 10.3pc price rise, the shares are 40pc below where they were in June, and a well-timed, well-priced bid might be just the tonic � given an acquirer would undoubtedly stamp its brand on the service and have deeper pockets to be able to spend more on internet security.

TalkTalk�s short-term future may be secure, but after the past three weeks, it�s long-term future as a challenger to the status quo may be in doubt.

1
23
45
67
89
10

-       Shares  % 
 Charles William Dunstone  30.8%
Capital Research          16.0%David P. J. Ross          12.2%
Invesco Asset Management   6.8%Alken Asset Management     4.9%
Jupiter Asset Management   4.6%Credit Suisse              3.9%
Group ESOT                 2.8%

1
23
45
67
8

-- Funding --
 At 31 March 2015, the Group�s sources of finance were:
 �109m US Private Placement Notes (corporate bonds); maturing 2021-2026
�340m drawn from �560m revolving credit facility; maturing July 2019�100m term loan; maturing July 2019
�50m bilateral agreement; maturing July 2019

Edited by deleted (Fri 13-Nov-15 05:57:59)

In reply to a post by MrSaffron:

Was this an ironic post or a series of copy/pastes or your personal opinion?

Edited by deleted (Fri 13-Nov-15 16:37:34)

Edited by deleted (Sat 14-Nov-15 01:47:11)

Edited by deleted (Sat 14-Nov-15 01:48:58)

In reply to a post by MrSaffron:

To be honest I am edging closer to labelling this as trolling

Edited by broadband66 (Sun 15-Nov-15 11:11:32)

In reference to www.telegraph.co.uk/finance/newsbysector/mediatechnologyandtelecoms...:

TalkTalk�s debt pile now stands at £631m, a level that prompted unanswered questions from analysts over the covenants on its borrowings. The company said it expects the total to come down by the end of the year; most in the City disagreed.

In reference to www.telegraph.co.uk/finance/newsbysector/mediatechnologyandtelecoms...:

Amid the rapid consolidation of the telecoms industry this year, the shares climbed beyond 400p amid rumours it could be snapped up.

A senior telecoms industry rival said: �Charles [Dunstone] was saying he wanted a strategic buyer at a time when strategic buyers are paying premiums. But what you would be buying with TalkTalk is basically a load of customers that are more prone to churning and not much else.

In reference to www.ft.com/cms/s/0/01297ca2-895a-11e5-90de-f44762bf9896.html:

John Fingleton, who led the Office of Fair Trading between 2005 and 2012, said that fixed-line communications constituted one of Britain�s �worst bottlenecks�.

�A really easy solution for everybody would be what happened in New Zealand � for BT to wake up and work out that it�s in everyone�s best interests for it to [separate its fixed-line network] voluntarily,� he told a conference, sponsored by one of BT�s main rivals, Sky.

BT should voluntarily spin off its fixed-line telephone and broadband network Openreach in order to avoid a protracted regulatory battle, the former head of Britain�s competition regulator has said.

Edited by deleted (Sun 15-Nov-15 18:39:42)

In reply to a post by broadband66:

All pales in to insignificance after the week end but what you posted AGAIN is just a report written by a hack at a newspaper.

Crude, bearish and unsubstantiated talk intended only to damage TalkTalk further .........

In reply to a post by AdrianPH:

I don't know.

I did worry later that posting a response may have been a mistake as the suggestion could lead to regular 20 page submissions carping on about second hand fish salesmen and the corruption rife amongst the members of the millet growers association.

What is the market position on cuttlefish stocks this week?