TalkTalk Cyber-Attack

Many of you will have heard that TalkTalk experienced a “significant and sustained cyber-attack” and a criminal investigation was launched on Thursday. As SWGfL uses TalkTalk for certain services, we are working hard to understand as much as we can about this, and whether there is any impact on those services or the related data.

At this stage we have been advised that the issue relates more to consumer data and a subset of small business customers (SWGfL, and consequently schools using TalkTalk services via SWGfL, are a corporate customer).

TalkTalk would like to reassure us that they take the security of customers’ data very seriously: “We constantly review and update our systems to make sure they are as secure as possible. We’re taking all the necessary steps to understand this incident and to protect as best we can against similar attacks in future. We have been working with leading cybercrime specialists, security services and the Metropolitan Police to establish exactly what happened and the extent of any information accessed.

That investigation is still ongoing, but unfortunately there is a chance that some of the following consumer and a subset of small business data has been compromised: names, addresses, phone numbers, email addresses, TalkTalk account information, credit card details and/or bank details. No other segments are impacted. We have contacted both the ICO and Ofcom.”

SWGfL treats data security with the highest priority, and will continue to work with TalkTalk and our other partners to gain a fuller understanding of the issue and any consequential impact, and we’ll issue further updates as soon as we can.