Carphone Warehouse fined £400k over cyber attack that left millions of customers exposed
CARPHONE WAREHOUSE has been fined £400,000 after more than three million customers’ records were exposed.
GETTY
In the 2015 cyber attack, which also compromised 1,000 staff, hackers accessed the names, addresses, phone numbers, dates of birth and payment card details of more than 18,000 customers.
Last night, Information Commissioner Elizabeth Denham said: “A company as large, well-resourced, and established as Carphone Warehouse, should have been actively assessing its data security systems, and ensuring systems were robust and not vulnerable to such attacks.
"Carphone should be at the top of its game when it comes to cyber security and it is concerning that the systemic failures we found related to rudimentary, commonplace measures.”
GETTY
Carphone should be at the top of its game when it comes to cyber security and it is concerning that the systemic failures we found related to rudimentary, commonplace measures
A statement from the company said: "As the ICO notes in its report, we moved quickly at the time to secure our systems, to put in place additional security measures and to inform the ICO and potentially affected customers and colleagues.
"Since the attack in 2015 we have worked extensively with cyber security experts to improve and upgrade our security systems and processes.
"We are very sorry for any distress or inconvenience the incident may have caused."