topic Re: My O2 account was hacked! in Discussions & Feedback

My O2 account was hacked!

Anonymous — Fri, 30 Sep 2011 11:38:34 GMT

A couple of weeks ago I received an odd text from O2 informing me that I can upgrade my handset in September 2013. Now, I have a sim-only contract and haven't had a new handset from O2 in a number of years but I knew my contract was due to expire some time in late September so I checked my O2 account online. It seems that I now have a new tariff of £36 a month, which I knew nothing about and checking on down the page I spotted a completed order which turned out to be for an iPhone 4. Naturally I hadn't placed this. The Yodel tracking number revealed that it had been delivered to an address that wasn't mine the previous day.
I called O2 and discovered that my security question had been changed along with my home address and e-mail address. Someone had clearly managed to access my O2 account online and ordered himself a phone at my expense. Since the user name and password are known only to me, either O2's site security is extremely poor or someone inside O2 has accessed my information. Either way, I'm not impressed.
The customer service adviser was very helpful and promised that the fraud department would investigate and call me. However, eight days later I have heard no word from them and in the meantime I can do nothing about changing my contract while there is an issue with my account. I was planning to get a new phone, possibly the new iPhone when it comes out, but now I'm very concerned about O2's security. I've been with them for over ten years but I'm seriously considering whether I want to continue with them now.
The only piece of good news is that the phone was delivered one day and blacklisted the next.
Has anyone else had this happen? If so, how did O2 handle it?

Re: My O2 account was hacked!

Anonymous — Fri, 30 Sep 2011 14:52:30 GMT

I think its far more likely that the security issue is at your end. But you'll need to wait for the fraud people to do their job. It will take longer than eight days though. Probably much longer if they need to liaise with courier, police etc.
In the mean time it would be a good idea to check your security procedures as your info is already 'out there' . Both real world and computer. Also check your credit report in case you have been signed up to anything else. You bank can give you advice on protecting yourself (ask them about CIFAS).

Re: My O2 account was hacked!

Anonymous — Tue, 18 Oct 2011 18:33:06 GMT

This exact same thing happened to me last Saturday.
If only I could get hold of the thieving get!!! :robotmad:

Re: My O2 account was hacked!

Anonymous — Wed, 19 Oct 2011 10:39:49 GMT

I think its far more likely that the security issue is at your end.

I'd like to know how. My computer is only accessible to me and my user name and password are not written down or stored anywhere. Other than the O2 site being less than secure, I can't imagine how anyone could obtain my details.
After complaining that I hadn't heard from the fraud department I was told that they had tried to contact me on the 27th. This was not true; I'd had no missed calls, even from withheld numbers. When they did contact me the next day, they informed me that it was possible someone had blagged his way past the security measures by calling with little more than my name and telephone number. I'm not sure how true that is, but if it is, it doesn't say much about their security.
After a round of issues with billing and a retention adviser who deliberately tried to mislead me, I've jumped ship. I was with O2 for over ten years and now I have the new iPhone on another network. I hope O2 can afford to lose customers who are prepared to commit to that kind of outlay.

Re: My O2 account was hacked!

Anonymous — Wed, 19 Oct 2011 18:38:32 GMT

I was told to expect a reply within a week, if my case is fraudulent.
I didnt want to move away from o2 because I l;ike the perks you get with concert gigs, but this isn`t good enough.
I`m now stuck with a £36 x 24 month contract until this is resolved.
Great.
Eddie

Re: My O2 account was hacked!

Anonymous — Mon, 24 Oct 2011 23:28:59 GMT

I received an email from O2 today confirming my upgrade order but as I had made no such order I telephoned them. The guy I spoke to was very disbelieving assuring me no-one could have made an order without my security information and that they could only have got this from me. After a very heated debate I thought to ask where the phone was being sent to and it turns out my address had been changed - the phone is due to be delivered to Essex, I live in West Sussex. I am sure it is someone within O2 that has done this - I cannot see how anyone else could retrieve such information. I am furious that I now have to wait up to three days for the fraud department to contact me. In fact I was so furious I contacted the nearest Essex police station to the address for the order and explained what had happened but guess what - they won't do anything until contacted by O2. Even though I have given them the address the phone is due to be delivered to they won't do a flippin thing. I am considering driving to the address myself and confronting the thieving ......! Its a disgrace and I have sent an email to Watchdog about what seems to be going on at O2 and hope they will pick up the story. Tomorrow I will have to go to my bank to ensure O2 are not able to take the £37 a month the phone costs from my account and unless I drive to Essex don't see there is anything more I can do.

Re: My O2 account was hacked!

Anonymous — Tue, 25 Oct 2011 09:30:03 GMT

Adept and Karen, It doesn't need to be done on your computer, nor is it likely that it is someone at O2. The trouble with identity theft is that the perpetrators are pretty good, you have only to see an ep of The Real Hustle to see how easy it is for them.
For example, if you bin your mail, they could start with your name and address , if you have used public wifi they can read all your emails, including any that are from O2, there are just so many ways they can exploit that it's a mistake to assume anything about how it "must" have happened. That's why the mobile networks have dedicated fraud teams, they all suffer from this.
In my paranoia I never bin anything until its shredded, but I'm sure there are other ways they can get me too

Re: My O2 account was hacked!

Anonymous — Tue, 25 Oct 2011 10:58:21 GMT

Beaufighter - I am absolutley meticulous with my security - I have no paper bills from O2 and always shred anything with any of my personal details on and have never used public wifi. As an update on my case - I have been spoken to this morning by O2's fraud department who have been extremely hepful and have cancelled delivery of ths phone. They have also informed me that this order was made over the telephone and that three or four attempts were made to access my account yesterday before they were finally successful. Well, I'm sorry but that is disgraceful - something should have flagged something up to someone and the fraud guys agree. To try that many times and then be able to change security settings and my address is completely unacceptable in the world we live in. I had a fraudulent attempt on a credit card a while ago and M&S rang me immediately to check a transaction as it was out of my usual spending pattern - surely O2 can install similar systems so after one unsuccessful the account is locked out until the mobile number is telephoned and checked. If M&S can do it I am sure O2 can. So Beaufighter I'm not saying this can never happen but I am saying more should have been done by O2 who could and should have prevented this particular case.

Re: My O2 account was hacked!

Anonymous — Tue, 25 Oct 2011 15:07:34 GMT

I don't disagree, and to be fair you have posted something that I was wondering about earlier but couldn't edit in to my post thanks to forum problems. That something was the thought that it may have been accessed over the phone through an agent trying to be misguidedly helpful, or not caring at all. This is borne out by the fact that three agents did turn them away previously. These agents were doing their job and would have noted the account. The details of the call where access was granted will be recorded on the system and that would be basis of my complaint if I was you.

Re: My O2 account was hacked!

perksie — Tue, 25 Oct 2011 22:39:17 GMT

Hopefully the fraud team will get to the bottom of what's gone wrong here in regard to Karen10.
Perhaps you'll let us know how you get on.

Re: My O2 account was hacked!

Anonymous — Thu, 03 Nov 2011 21:39:16 GMT

Guess im not alone same things happened to me looks like 02 are being targeted seems to be people due upgrades

Re: My O2 account was hacked!

Anonymous — Thu, 03 Nov 2011 22:49:58 GMT

I received an email from O2 today confirming my upgrade order but as I had made no such order I telephoned them. The guy I spoke to was very disbelieving assuring me no-one could have made an order without my security information and that they could only have got this from me. After a very heated debate I thought to ask where the phone was being sent to and it turns out my address had been changed - the phone is due to be delivered to Essex, I live in West Sussex. I am sure it is someone within O2 that has done this - I cannot see how anyone else could retrieve such information. I am furious that I now have to wait up to three days for the fraud department to contact me. In fact I was so furious I contacted the nearest Essex police station to the address for the order and explained what had happened but guess what - they won't do anything until contacted by O2. Even though I have given them the address the phone is due to be delivered to they won't do a flippin thing. I am considering driving to the address myself and confronting the thieving ......! Its a disgrace and I have sent an email to Watchdog about what seems to be going on at O2 and hope they will pick up the story. Tomorrow I will have to go to my bank to ensure O2 are not able to take the £37 a month the phone costs from my account and unless I drive to Essex don't see there is anything more I can do.

ive had same thing happen to me the clerk has cancelled all direct debits and they are currently doing the fraud stuff right now, im wondering if any of you have had any problems with bank accounts etc as im thinking they might have our bank details too

Re: My O2 account was hacked!

Anonymous — Thu, 03 Nov 2011 22:58:42 GMT

I don't disagree, and to be fair you have posted something that I was wondering about earlier but couldn't edit in to my post thanks to forum problems. That something was the thought that it may have been accessed over the phone through an agent trying to be misguidedly helpful, or not caring at all. This is borne out by the fact that three agents did turn them away previously. These agents were doing their job and would have noted the account. The details of the call where access was granted will be recorded on the system and that would be basis of my complaint if I was you.

i was told they tried 4 times in one day on my account before becoming succesful tbh i think there should be a number system where over the phone the customer has a pin sent to the account they must quote if they dont quote that pin at all they are refused service. im dumbfounded how this has even happened at all and im notcing the trend its those due an upgrade

Re: My O2 account was hacked!

Anonymous — Fri, 11 Nov 2011 14:26:28 GMT

To sjcrows - I honestly don't believe this - they tried the same amount of times before gaining access to my account and all tries were on the ame day! How on earth can someone not have seen that there had previous attempts to access my account and not locked the account until further checks were made - all they had to do was make one phone call to me on my mobile for confirmation I was trying to upgrade my phone and all this could have been avoided. Wants even more incredible is that having gained access to my account on the 4th attempt they were able to change my address and security questions. I am alos concerned about personal information O2 may have given away during these four phone calls and am considering taking advice with regard to O2 breaching the Data Protection act.

Re: My O2 account was hacked!

Anonymous — Fri, 11 Nov 2011 14:40:46 GMT

The iPhone I supposedly ordered from O2 was also delivered to an address in Essex - 16 The Ave, Loughton, Essex IG10 4PT to be precise. But I don't live anywhere near Essex. In fact, I live in Northern Ireland so I doubt someone has travelled over here to spy on me and acquire my details, then flee back over the Irish Sea to Essex to get himself an iPhone at my expense.
Like karen10 I have never dumped my bills or used public wi-fi. I only use my own computer over my wi-fi, with the higest possible security settings and encryption. And anyway, isn't the O2 site supposed to be secure? If the people involved can access our accounts shortly before the end of the contract period, it seems clear that they have information regarding more than our names, addresses and telephone numbers. I don't know if I believe that it is someone inside O2 as they would have total access to our details and therefore would not need to bluff their way through security but there is definitely a serious lack in security.
After I had resolved the issue with the fraud department and switched network, O2 continued to charge me for insurance on the iPhone. Why on earth would someone steal an iPhone and order insurance for it as well? When I called to report this, I was offered credit on my account to cover it. I pointed out at the time that credit would be no use as I had left but the adviser assured me that it would work out. I assumed that this would come off the bill and accepted his word.
Needless to say, it was only credit against further bills, but I had left O2 so I wouldn't get any more bills, right? Then I got a bill. Because my contract had been renewed just before I left (but not by me if you recall), I was hit with a cancellation fee for two years at my old tariff. My new bill was over £200.
Thankfully the matter was resolved quickly and I now owe O2 nothing. For the moment anyway. I'm with Vodafone. I hope I never have the kind of bother with them that I've gone through with O2. We'll see how it works out. But I have a friend who works pretty high up in Vodafone so I have a hotline to sort any issues out. He even got me discount.

Three Years!

Anonymous — Wed, 23 Nov 2011 16:05:40 GMT

Hi all, I was very interested to find this forum thread.
I've had my account repeatedly hacked and infiltrated for 3 years now. 02 have done next to nothing about it and only act if I prompt them.
If anyone has advice on where I should go to get external help, I'd really appreciate it.
I just want more rigorous security measures put in place for my account and for someone to reassure me that my sensitive data is safe in their hands; I'm not after any compensation, just security.
So far I've contacted OfCom, The ICO and Consumer Watch. All are very sympathetic but none are able to assist.
Any help, advice or similar experiences would be welcome.
Thank you.

Re: My O2 account was hacked!

Anonymous — Wed, 23 Nov 2011 16:42:40 GMT

Your o2 details are only as safe as you make them.
If you've had your account 'hacked' 3 times then I'd take a good look at how strong your password is, what you do with, if any, paper bills/letters etc you throw out, what you've been revealing to people you may have though you can trust etc.

Re: My O2 account was hacked!

perksie — Wed, 23 Nov 2011 17:08:30 GMT

This is not true in all cases, people have passed security with as little as a name and phone number.
While O2 allow phones to be delivered to alternative addresses, and orders placed without the security procedures being followed, these frauds will continue.

Re: My O2 account was hacked!

Anonymous — Wed, 23 Nov 2011 17:15:21 GMT

It isnt policy to allow this kind of access though. O2 has a rigid data protection policy. Sadly no kind of policy can compensate for lazy, disinterested operatives 😞
These are few and far between though, thankfully, and call monitoring weeds them out when they do appear,although this, by its nature can only be discovered after the fact and so it is too late for that customer, so, for someone to have had their account hacked repeatedly the cause has to be closer to home.

Re: My O2 account was hacked!

perksie — Wed, 23 Nov 2011 18:29:29 GMT

I know it's not policy, unfortunately though it is happening, even in cases where external access to details has been virtually impossible.
I hope it's as rare as you believe it to be.