O2 customer details being leaked???

[Anonymous]

Hi,

I received the below email which is almost certainly a phishing attack, given the real email address it came from and the URL behind the "HERE" link. Did anyone else get this? It is scary that they got hold of my name, email address, phone number and even date of birth and now they want my password too.

From: noreply@o2mail.co.uk <test@sipav.org>
Date: 30 December 2014 8:23:39 pm GMT
To: "mr Xxxxx Xxxxx" <xxxxx@yahoo.co.uk>
Subject: mr Xxxxx Xxxxx - Your account for mobile number (07xxxxxxxxx) requires immediate attention - 30 Dec 2014

This e-mail was sent to xxxxx@yahoo.co.uk by O2.

Hello mr Xxxxx Xxxxx,
Your O2 account requires your immediate attention.
We can see that you've recently paid your monthly bill and we request that your information is validated before we can finalize your balance.

Please confirm that the information displayed below is correct:

Name: mr Xxxxx Xxxxx
Date of Birth: dd/MM/yyyy
Mobile Number: 07xxxxxxxxx
Current Plan: Pay Monthly mobile

You must now click here HERE (xxxxx) to verify your O2 account.
Please note, if you fail to validate your account with us your services may be suspended.
Regards
The O2 Team

Sorry, but we can't write back to you from this address, so please do not reply.

This email is sent from Telefonica UK Limited
Registered office: 260 Bath Road, Slough, Berkshire, SL1 4DX
Registered number: 1743099

[MI5]

We don't know, but it is clearly a major security breech somewhere....

[Anonymous]

As yet no official response from o2 in afraid.

It is pretty poor really as the data must have started from them originally.

[Cleoriff]

Perhaps @Toby needs mentioning here as well?  At least if we mention him he will be aware of the amount of people contacting the forum...and sadly,  many more who don't come here

[Anonymous]

@Cleoriff absolutely agree with you here.

I have not received the email but if I do I will immediately report o2 to the Information Commissioners Office for a serious breach of data protection.

@Toby why has there not been anything official from o2 regarding this rather serious data breach? ?

[Beenherebefore]

Those affected should report it to the Information Commissioners Office

https://ico.org.uk/concerns/handling/

[Cleoriff]

Actually @Anonymous  I am surprised I haven't been contacted. My contract is finished at the end of this month. I suspect I would be a prime target.

Don't get me wrong I am pleased I haven't been contacted...Fingers crossed they have no access to my details...

[Cleoriff]

---

@Beenherebefore wrote:

Those affected should report it to the Information Commissioners Office

https://ico.org.uk/concerns/handling/

---

Thanks for that link @Beenherebefore  I will do that if I am contacted. Also will pass it on to anyone else

[Anonymous]

That's cos we told the fraudsters who you are and they thought better off it lol

😈😈😈😈😈😈

[anticpated]

Another reason not to use my real name or a real word for my password. No problems here.

[Anonymous]

My view is that o2 have released the information to their "trusted partners" and somewhere in between there has been a leak either at o2, the link between, or inside a trusted partner hence why the information is so detailed.