BUGGED OUT ‘Worryingly easy’ TalkTalk security flaw put millions of customers’ login info at risk

https://www.thesun.co.uk/tech/5928383/talktalk-security-flaw-customer-login-information-risk/

A hacker identified only as B told sky news of a bug that let him take data of lakhs of users of TalkTalk. There were very sensitive information like bank account and other personal information. TalkTalk said it knew of the vulnerability but did not remove it as it though it is hard to be worried. After a report of sky news, TalkTalk has removed the vulnerability but many of the data has already been stolen.

It was very easy for the hacker. He just used to spread phishing email. As soon as the user used to click on the link, he or she used to directed on a site reportedly same to TalkTalk. Then users continued to use that site for quite a long period of time and filled all their password and personal information. This led to major data breaches. It put the millions of users of TalkTalk at risk.  Even in 2015, hackers stole the data of 157000 users of TalkTalk. The company was also slapped with the big amount of fine in 2016 for major security breaches. That time it lost 1 lakh customers in the wake of the security breach.