Suspect vat refund email

[Anonymous]

Today I receved an email saying "In response to an increase in VAT in the EU and currency changes, and as a result of last week's VAT-related price change, it has come to our attention that between Oct 2012 and Oct 2014 there was a system error which resulted in some of our customers paying the incorrect rate of VAT on some services.

This email had all my personal information, but asked me to follow a link to log into my account, has anyone else seen an email like this? The email looked legitimate, if anyone from O2 monitors this thread, please let me know how to report this.

[MI5]

Makes sense, but still the public need an answer.

[Anonymous]

hi iam still geting these emails plus i got a text today what is going on here !?

[MI5]

---

@Anonymous wrote:

hi iam still geting these emails plus i got a text today what is going on here !?

---

Truth is that we don't know and still waiting for an explanation.....

[Cleoriff]

---

@Beenherebefore wrote:

I agree but ICO will not look upon O2 as having released the data if a 3rd party was hacked.

I believe that's why O2 have phrased their statements as they have. Also probably explains why O2 have notified ICO "out of courtesy" because although it involved their customers' data, O2 did not release it.

---

Sorry to disagree here but I will, purely on a matter of principle. I didn't sign up with anyone else but O2... Therefore if my secure details have been released by whatever means... it is O2 I would be holding responsible

[Anonymous]

i,am getting so annoyed now what its been like 2 weeks now of these emails and now there texting my phone number ?wtf sort it out o2

[Anonymous]

quick enough to take our money but wont give an answer ?

[Anonymous]

---

@Cleoriff wrote:

---

@Beenherebefore wrote:

I agree but ICO will not look upon O2 as having released the data if a 3rd party was hacked.

I believe that's why O2 have phrased their statements as they have. Also probably explains why O2 have notified ICO "out of courtesy" because although it involved their customers' data, O2 did not release it.

---

Sorry to disagree here but I will, purely on a matter of principle. I didn't sign up with anyone else but O2... Therefore if my secure details have been released by whatever means... it is O2 I would be holding responsible

---

@Totally 1000% agree with @Cleoriff.  O2 have the responsibility as they hold my data. If they share it, with or without my consent, then it is o2 who must answer if their partner releases information out to the world. 

Indeed I know many a Data Protection Manager who would tell you that. 

[Anonymous]

---

@Anonymous wrote:

quick enough to take our money but wont give an answer ?

---

Sorry @Anonymous but how quickly o2 collect payments isn't really relevant in this issue. 

If you read further up, I am talking to the Directors Office at o2 on this and sharing when I have authorisation to do so. 

[Beenherebefore]

---

@Cleoriff wrote:

---

@Beenherebefore wrote:

I agree but ICO will not look upon O2 as having released the data if a 3rd party was hacked.

I believe that's why O2 have phrased their statements as they have. Also probably explains why O2 have notified ICO "out of courtesy" because although it involved their customers' data, O2 did not release it.

---

Sorry to disagree here but I will, purely on a matter of principle. I didn't sign up with anyone else but O2... Therefore if my secure details have been released by whatever means... it is O2 I would be holding responsible

---

You obviously missed the bit in red above

[Anonymous]

Thank you!