topic Re: Time to change password ? in Discussions & Feedback

Time to change password ?

adamtemp64 — Tue, 26 Jul 2016 04:16:33 GMT

http://www.bbc.co.uk/news/technology-36764548

just a heads up perhaps now is a good time to change o2 account password .

Re: Time to change password ?

jonsie — Tue, 26 Jul 2016 05:33:01 GMT

Good information @adamtemp64 and advice that people need to follow. Change all passwords regularly or use a password management tool.

Re: Time to change password ?

PhoneChanger — Tue, 26 Jul 2016 07:24:47 GMT

Just shows how open the systems are, sad sign of the times really. People should change the passwords regularly and try not to use the same one for all sites.

Re: Time to change password ?

MI5 — Tue, 26 Jul 2016 07:33:15 GMT

No different advice to that which has been given for years.

Re: Time to change password ?

Cleoriff — Tue, 26 Jul 2016 07:35:27 GMT

Thanks for the heads up. Though I have just changed mine (during my process of upgrading to Win 10 on my Laptops)...so it appears this was divine intervention...

Re: Time to change password ?

Bambino — Tue, 26 Jul 2016 08:01:01 GMT

Of course it's a good idea to change your passwords periodically, but why is the BBC just today getting around to reporting a hack that happened three years ago?

Re: Time to change password ?

MI5 — Tue, 26 Jul 2016 08:04:19 GMT

Slow news day I guess.

Re: Time to change password ?

jonsie — Tue, 26 Jul 2016 08:09:52 GMT

It would seem that someone has approached the BBC rather than a reporter finding out. I suppose that it's still relevant because many people will still have the same personal details and passwords.

Re: Time to change password ?

Bambino — Tue, 26 Jul 2016 08:49:49 GMT

I would imagine that it is still relevant. Many people use extremely weak passwords and never change them. Perhaps it might be a wise move for O2 themselves to send out a mass message to their customers to change their passwords periodically? Wouldn't be too difficult to do.

Re: Time to change password ?

Curr946 — Tue, 26 Jul 2016 09:14:41 GMT

This would require some organisational skills

Re: Time to change password ?

Anonymous — Tue, 26 Jul 2016 09:19:28 GMT

O2 should be informing customers about this. People need to know if their info has been stolen

Re: Time to change password ?

MI5 — Tue, 26 Jul 2016 09:24:17 GMT

In this case, it hasn't been stolen from O2 though, so they wouldn't know.

Re: Time to change password ?

jonsie — Tue, 26 Jul 2016 09:24:27 GMT

The BBC say : All the O2 account holders whose details the BBC has seen have been informed, with many saying they had used the same login for other online accounts.

O2 say : We have not suffered a data breach. Credential stuffing is a challenge for businesses and can result in many company's customer data being sold on the dark net.

We have reported all the details passed to us about the seller to law enforcement and we continue to help with their investigations

Re: Time to change password ?

Curr946 — Tue, 26 Jul 2016 09:27:38 GMT

the only way to stay 100% safe online is to not be online

Re: Time to change password ?

Bambino — Tue, 26 Jul 2016 09:34:23 GMT

@jonsie wrote:

The BBC say : All the O2 account holders whose details the BBC has seen have been informed, with many saying they had used the same login for other online accounts.

O2 say : We have not suffered a data breach. Credential stuffing is a challenge for businesses and can result in many company's customer data being sold on the dark net.

We have reported all the details passed to us about the seller to law enforcement and we continue to help with their investigations

At the risk of sounding harsh, with all the warnings that are already out there about being vigilant, anyone in this day and age who is using the same login for multiple accounts and not using strong passwords, doesn't get much sympathy from me if their account gets hacked. You read about things like this every day, yet people still operate under the delusion that it won't happen to them.

Re: Time to change password ?

Toby — Tue, 26 Jul 2016 09:55:28 GMT

Hi guys,

We have found no evidence that our data has been compromised. Read more on staying protected here: http://www.o2.co.uk/help/safety-and-security/fraud-and-phishing-advice

Re: Time to change password ?

MI5 — Tue, 26 Jul 2016 10:20:59 GMT

@Toby wrote:

Hi guys,

We have found no evidence that our data has been compromised. Read more on staying protected here: http://www.o2.co.uk/help/safety-and-security/fraud-and-phishing-advice

No one ever suggested it was O2 at fault (this time)

O2 customer data sold on dark net - BBC headline 26/7

Anonymous — Tue, 26 Jul 2016 14:59:01 GMT

O2 customer data sold on dark net

http://www.bbc.co.uk/news/technology-36764548

Thought I should start this thread as some O2 customers may be concerned when they read the headline on the BBC news website.

The story goes that O2 customer data is being sold by criminals on the dark net.

The data obtained by usernames and passwords first stolen from gaming website XSplit three years ago to log onto O2 accounts. When the login details matched, the hackers could access O2 customer data in a process known as "credential stuffing". O2 has reported the case to police.

1/. Only need to worry if you were registered with gaming website XSplit three years ago

2/. Use different passwords for different websites.

You wouldn't have one key that opened your front door, gym locker, shed, started your car and opened your suitcase.... would you?

Re: O2 customer data sold on dark net - BBC headline 26/7

Curr946 — Tue, 26 Jul 2016 15:21:51 GMT

yup