{"id":1937,"date":"2017-09-20T10:30:21","date_gmt":"2017-09-20T09:30:21","guid":{"rendered":"https:\/\/www.dataleaklawyers.co.uk\/blog\/?p=1937"},"modified":"2024-07-05T12:41:06","modified_gmt":"2024-07-05T11:41:06","slug":"talktalk-fined-100k-putting-customers-risk-scams-fraud","status":"publish","type":"post","link":"https:\/\/www.dataleaklawyers.co.uk\/blog\/talktalk-fined-100k-putting-customers-risk-scams-fraud","title":{"rendered":"TalkTalk fined \u00a3100,000 for putting 21,000 customers at risk of scams and fraud"},"content":{"rendered":"\n
\n
\n\t\t\t\t\t\t<\/i> UPDATE: PLEASE NOTE THAT WE ARE NO LONGER ABLE TO ACCEPT NEW CASES IN THIS MATTER.<\/b>\n\t\t\t\t\t<\/div>\n<\/p><\/div>\n

As if the £400,000 fine last year was not enough, TalkTalk has been slapped with a £100,000 fine for reportedly breaching data protection laws over customer information.<\/p>\n

Unlike the last fine which came off the back of countless customers’ information being exposed after a malicious hacking, TalkTalk is being fined for an alleged lack of information security, leaving customer data “open to exploitation by rogue employees.”<\/p>\n

TalkTalk employees reportedly have access to a great deal of information, heightening the need for internal security measures.
\n<\/p>\n

The latest issue<\/h2>\n

This particular breach was discovered when customers reported complaints of calls from scammers. During these calls, scammers pretended to be support services, and in order to ‘verify’ their position, scammers reportedly quoted the customers\u2019 own addresses and TalkTalk account numbers; information only TalkTalk and authorised agents should have access to.<\/p>\n

The ICO investigated the complaints and found that TalkTalk was using a portal where employees could access customer data through a database. Access was shared with an Indian-based IT company Wipro<\/em>, who are tasked with dealing with TalkTalk’s customer complaints and coverage problems. However, the level of access provided to Wipro is said to be unreasonably large, putting customers at risk.<\/p>\n

Unauthorised access confirmed<\/h3>\n

Three employee accounts were found to have accessed personal information without authorisation for up to 21,000 TalkTalk customers. With such a vast amount of information at their fingertips, it was possibly inevitable that someone would break the rules and access information they had no right to.<\/p>\n

The ICO found that “forty Wipro employees had access to data of between 25,000 and 50,000 TalkTalk customers”. The cause for concern is that, unless 50,000 customers wanted to complain about service or network, why would Wipro employees need access to such a great deal of information?<\/p>\n

There’s more…<\/h3>\n

Wipro employees could also:<\/p>\n