Carphone Warehouse Compromised



Carphone Warehouse, a British cellphone company, fell victim to a comprehensive hack discovered on Wednesday, August 5th. 

The hackers gained access to the names, addresses, dates of birth, andbank details of 2.4 million customers as well as access to 90,000 encrypted credit card details. Carphone Warehose, which is owned by Dixons Carphone, said the “vast majority” of customers were not impacted in the breach; however, customers of OneStopPhoneShop.com, e2save.com, Mobiles.co.uk, and TalkTalk Mobile were possibly affected as well.

After the incident Carphone notified its victims, cautioning them to beware of unsolicited calls requesting personal information, passwords or bank details. They also advised customers to conduct the following:

  • Notify your bank and credit card companies of the incident so they can monitor your account for any suspicious activity
  • Change your password for your account
  • Check your credit rating to ensure no one has opened an account in your name using one of the following services: Experian and Equifax
  • If you have fallen victim to fraud, report it to Fraud Act

Carphone Warehouse announced that the incident, perpetrated a few weeks ago, was immediately stopped after its discovery on Wednesday. Carphone launched a forensic investigation to find the culprits.

Despite these efforts we strongly caution users to follow the tips above in addition to being wary of phishing emails. Phishing emails are the most commonly used techniques by cybercriminals tocompromise systems and gain access to target systems, both for consumers as well as corporations. Attackers can use the sensitive information from Carphone Warehouse as a platform to launch other phishing attacks to target victims.

We advise users to be extremely cautious when receiving emails, especially from unsolicited messages or from unknown sources. It’s advised not to open the messages, click on any URLs or open attachments as they could be programmed to redirect you to harmful sites or install malicious software directly into your machine.

The official statement by Carphone Warehouse can be found on Dixons Carphone's website, where the company issued a public statement on Saturday, August 8.

Jean-Paul

Please post your comments here

Data Protection Vendor Evaluation Toolkit

The toolkit contains an RFI-RFP criteria template and a corresponding vendor evaluation scorecard.

Download Now

Related Articles
Rarely is the (Breach) Question asked: Is Our IT Pros Learning?

A new survey by The SANS Institute suggests that companies are worried about data breaches – but aren’t doing much to prevent them.

The Biggest and Most Impactful Data Breaches of 2016

There was no shortage of data breaches making news last year – let’s take a look back at some of the biggest and most damaging data breaches of 2016.

Survey Finds Breaches Depress Share Prices – a lot

A study by the firm CGI and Oxford Economics finds that share prices of breached firms drop by an average of 1.8% following a severe breach – and the hit is often permanent.

Free Trial 2017 Gartner DLP MQ Contact Us