My O2 account was hacked!

[Anonymous]

A couple of weeks ago I received an odd text from O2 informing me that I can upgrade my handset in September 2013. Now, I have a sim-only contract and haven't had a new handset from O2 in a number of years but I knew my contract was due to expire some time in late September so I checked my O2 account online. It seems that I now have a new tariff of £36 a month, which I knew nothing about and checking on down the page I spotted a completed order which turned out to be for an iPhone 4. Naturally I hadn't placed this. The Yodel tracking number revealed that it had been delivered to an address that wasn't mine the previous day.
I called O2 and discovered that my security question had been changed along with my home address and e-mail address. Someone had clearly managed to access my O2 account online and ordered himself a phone at my expense. Since the user name and password are known only to me, either O2's site security is extremely poor or someone inside O2 has accessed my information. Either way, I'm not impressed.
The customer service adviser was very helpful and promised that the fraud department would investigate and call me. However, eight days later I have heard no word from them and in the meantime I can do nothing about changing my contract while there is an issue with my account. I was planning to get a new phone, possibly the new iPhone when it comes out, but now I'm very concerned about O2's security. I've been with them for over ten years but I'm seriously considering whether I want to continue with them now.
The only piece of good news is that the phone was delivered one day and blacklisted the next.
Has anyone else had this happen? If so, how did O2 handle it?

[perksie]

There again if the CS staff have full access to your account details, it only takes one bad egg........!

[Liquid]

Agreed that's why I'm rather anti the india based techies. Not being racist but its hard enough to control things in your vicinity let alone overseas where the laws you operate on have no jurisdiction.

Does India enforce the data protection act?:/

[jonsie]

Even more worrying that your data and passwords are in International data bases!

[perksie]

Scaring ourselves silly here......:smileyhappy:

[Liquid]

Agreed, I'm always wearing my foil hat:) but O2 are poking holes in it:(

[Anonymous]

surely it would be a colander then?

[perksie]

---

@Anonymous wrote:

surely it would be a colander then?

---

That's a calendar with no dates in it isn't it?

[Anonymous]

you are simply hilarious! this is the image stuck in my head now...

[perksie]

[Anonymous]