{"id":4150,"date":"2018-06-13T17:21:17","date_gmt":"2018-06-13T16:21:17","guid":{"rendered":"http:\/\/www.gpsj.co.uk\/?p=4150"},"modified":"2018-06-13T17:31:11","modified_gmt":"2018-06-13T16:31:11","slug":"failure-to-protect-data-after-hackers-access-5-9m-bank-cards-at-dixons-carphone","status":"publish","type":"post","link":"https:\/\/www.gpsj.co.uk\/?p=4150","title":{"rendered":"Failure to protect data after hackers access 5.9m bank cards at Dixons Carphone"},"content":{"rendered":"

\"\"<\/a>Reporter: Stuart Littleford<\/span><\/p>\n

Dixons Carphone says it has been the victim of an “unauthorised data access” in which millions of customer bank card details were targeted over the past 12 months.<\/p>\n

\n

The company believes there were hacking attempts since last July but these were only discovered over the past week and is thought these have compromised around 5.9 million cards in one of its processing systems for Currys PC World and Dixons Travel stores.<\/p>\n<\/div>\n

Dixons Carphone told GPSJ: “As part of a review of our systems and data, we have determined that there has been unauthorised access to certain data held by the company. We promptly launched an investigation, engaged leading cyber security experts and added extra security measures to our systems. We have taken action to close off this access and have no evidence it is continuing. We have no evidence to date of any fraudulent use of the data as result of these incidents. We have also informed the relevant authorities including the ICO, FCA and the police.<\/p>\n

Our investigation is ongoing and currently indicates that there was an attempt to compromise 5.9 million cards in one of the processing systems of Currys PC World and Dixons Travel stores. However, 5.8m of these cards have chip and pin protection. The data accessed in respect of these cards contains neither pin codes, card verification values (CVV) nor any authentication data enabling cardholder identification or a purchase to be made. Approximately 105,000 non-EU issued payment cards which do not have chip and pin protection have been compromised. As a precaution we immediately notified the relevant card companies via our payment provider about all these cards so that they could take the appropriate measures to protect customers.<\/p>\n

We have no evidence of any fraud on these cards as a result of this incident. Separately, our investigation has also found that 1.2m records containing non-financial personal data, such as name, address or email address, have been accessed. We have no evidence that this information has left our systems or has resulted in any fraud at this stage. We are contacting those whose non-financial personal data was accessed to inform them, to apologise, and to give them advice on any protective steps they should take.<\/p>\n

Dixons Carphone Chief Executive, Alex Baldock, told GPSJ: \u201cWe are extremely disappointed and sorry for any upset this may cause. The protection of our data has to be at the heart of our business, and we\u2019ve fallen short here. We\u2019ve taken action to close off this unauthorised access and though we have currently no evidence of fraud as a result of these incidents, we are taking this extremely seriously. We are determined to put this right and are taking steps to do so; we promptly launched an investigation, engaged leading cyber security experts, added extra security measures to our systems and will be communicating directly with those affected. Cyber crime is a continual battle for business today and we are determined to tackle this fastchanging challenge.\u201d<\/p>\n

Simon Cuthbert, Head of International at 8MAN by Protected Networks told GPSJ:\u00a0<\/strong>“This breach is just another example of an organisation failing to protect their most important asset \u2013 data. The repercussions will likely be extensive in terms of financial damage, reputational damage and customer loyalty. Not to mention \u2013 this is the first breach case since the GDPR deadline passed on the 25 May. It will be interesting, and noteworthy, to see how the ICO respond to this breach as it will likely set a precedent for those that follow, and certainly kick others into action if they haven\u2019t already ensured they are meeting, or at least attempting to meet, the new requirements.<\/p>\n

If Dixons Carphone are unable to provide information on who accessed the data, when, and what they did with it, and deliver a report that evidences this, then they stand a risk of really falling foul of the regulator. Organisations need to ensure they have visibility of who has access to what data, and what they are doing with it, and demonstrate they are taking the necessary steps to protect their data.”<\/p>\n

GPSJ asked if the data stolen had been “encrypted” at any stage but has not received a response from\u00a0Dixons Carphone.<\/p>\n","protected":false},"excerpt":{"rendered":"

Reporter: Stuart Littleford<\/p>\n

Dixons Carphone says it has been the victim of an “unauthorised data access” in which millions of customer bank card details were targeted over the past 12 months.<\/p>\n

The company believes there were hacking attempts since last July but these were only discovered over the past week and is thought <\/p>\n

Continue reading Failure to protect data after hackers access 5.9m bank cards at Dixons Carphone<\/a><\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":""},"categories":[1],"tags":[1149,1143,1147,1069,1142,1144,1145,25,26,264,1146,739,1104,310,1148,716],"class_list":["post-4150","post","type-post","status-publish","format-standard","hentry","category-it-it-security","tag-8man","tag-currys-pc-world","tag-cybersecurity","tag-data","tag-dixons-carphone","tag-dixons-travel-stores","tag-fca","tag-government-public-sector-journal","tag-gpsj","tag-gpsj-magazine","tag-hacked","tag-hacking","tag-ico","tag-public-sector","tag-simon-cuthbert","tag-stuart-littleford","odd"],"yoast_head":"\nFailure to protect data after hackers access 5.9m bank cards at Dixons Carphone - Government & Public Sector Journal<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.gpsj.co.uk\/?p=4150\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Failure to protect data after hackers access 5.9m bank cards at Dixons Carphone - Government & Public Sector Journal\" \/>\n<meta property=\"og:description\" content=\"Reporter: Stuart Littleford Dixons Carphone says it has been the victim of an “unauthorised data access” in which millions of customer bank card details were targeted over the past 12 months. The company believes there were hacking attempts since last July but these were only discovered over the past week and is thought Continue reading Failure to protect data after hackers access 5.9m bank cards at Dixons Carphone\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.gpsj.co.uk\/?p=4150\" \/>\n<meta property=\"og:site_name\" content=\"Government & Public Sector Journal\" \/>\n<meta property=\"article:published_time\" content=\"2018-06-13T16:21:17+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2018-06-13T16:31:11+00:00\" \/>\n<meta property=\"og:image\" content=\"http:\/\/www.gpsj.co.uk\/wp-content\/uploads\/2017\/07\/IMG_2075-300x200.jpg\" \/>\n<meta name=\"author\" content=\"The GPSJ Team\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"The GPSJ Team\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.gpsj.co.uk\\\/?p=4150#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.gpsj.co.uk\\\/?p=4150\"},\"author\":{\"name\":\"The GPSJ Team\",\"@id\":\"https:\\\/\\\/www.gpsj.co.uk\\\/#\\\/schema\\\/person\\\/d54386f99736367ec2789825fed93b4a\"},\"headline\":\"Failure to protect data after hackers access 5.9m bank cards at Dixons Carphone\",\"datePublished\":\"2018-06-13T16:21:17+00:00\",\"dateModified\":\"2018-06-13T16:31:11+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.gpsj.co.uk\\\/?p=4150\"},\"wordCount\":714,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/www.gpsj.co.uk\\\/?p=4150#primaryimage\"},\"thumbnailUrl\":\"http:\\\/\\\/www.gpsj.co.uk\\\/wp-content\\\/uploads\\\/2017\\\/07\\\/IMG_2075-300x200.jpg\",\"keywords\":[\"8MAN\",\"Currys PC World\",\"Cybersecurity\",\"Data\",\"Dixons Carphone\",\"Dixons Travel stores\",\"FCA\",\"Government & Public Sector Journal\",\"GPSJ\",\"GPSJ Magazine\",\"Hacked\",\"Hacking\",\"ICO\",\"public sector\",\"Simon Cuthbert\",\"Stuart Littleford\"],\"articleSection\":[\"IT & IT Security\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.gpsj.co.uk\\\/?p=4150#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.gpsj.co.uk\\\/?p=4150\",\"url\":\"https:\\\/\\\/www.gpsj.co.uk\\\/?p=4150\",\"name\":\"Failure to protect data after hackers access 5.9m bank cards at Dixons Carphone - Government & Public Sector Journal\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.gpsj.co.uk\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.gpsj.co.uk\\\/?p=4150#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.gpsj.co.uk\\\/?p=4150#primaryimage\"},\"thumbnailUrl\":\"http:\\\/\\\/www.gpsj.co.uk\\\/wp-content\\\/uploads\\\/2017\\\/07\\\/IMG_2075-300x200.jpg\",\"datePublished\":\"2018-06-13T16:21:17+00:00\",\"dateModified\":\"2018-06-13T16:31:11+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.gpsj.co.uk\\\/#\\\/schema\\\/person\\\/d54386f99736367ec2789825fed93b4a\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.gpsj.co.uk\\\/?p=4150#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.gpsj.co.uk\\\/?p=4150\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/www.gpsj.co.uk\\\/?p=4150#primaryimage\",\"url\":\"https:\\\/\\\/www.gpsj.co.uk\\\/wp-content\\\/uploads\\\/2017\\\/07\\\/IMG_2075.jpg\",\"contentUrl\":\"https:\\\/\\\/www.gpsj.co.uk\\\/wp-content\\\/uploads\\\/2017\\\/07\\\/IMG_2075.jpg\",\"width\":3456,\"height\":2304},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.gpsj.co.uk\\\/?p=4150#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.gpsj.co.uk\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Failure to protect data after hackers access 5.9m bank cards at Dixons Carphone\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.gpsj.co.uk\\\/#website\",\"url\":\"https:\\\/\\\/www.gpsj.co.uk\\\/\",\"name\":\"Government & Public Sector Journal\",\"description\":\"Public Sector, Government, business, stories and news along with latest developments, research, thought leadership, strategy, policy and insights\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.gpsj.co.uk\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.gpsj.co.uk\\\/#\\\/schema\\\/person\\\/d54386f99736367ec2789825fed93b4a\",\"name\":\"The GPSJ Team\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/13cdd73dc4abbd6e05b80a0562c7c553a9104ad2e5e96ee20afca2c462894143?s=96&d=blank&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/13cdd73dc4abbd6e05b80a0562c7c553a9104ad2e5e96ee20afca2c462894143?s=96&d=blank&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/13cdd73dc4abbd6e05b80a0562c7c553a9104ad2e5e96ee20afca2c462894143?s=96&d=blank&r=g\",\"caption\":\"The GPSJ Team\"},\"sameAs\":[\"http:\\\/\\\/gpsj.co.uk\"],\"url\":\"https:\\\/\\\/www.gpsj.co.uk\\\/?author=3\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Failure to protect data after hackers access 5.9m bank cards at Dixons Carphone - Government & Public Sector Journal","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.gpsj.co.uk\/?p=4150","og_locale":"en_GB","og_type":"article","og_title":"Failure to protect data after hackers access 5.9m bank cards at Dixons Carphone - Government & Public Sector Journal","og_description":"Reporter: Stuart Littleford Dixons Carphone says it has been the victim of an “unauthorised data access” in which millions of customer bank card details were targeted over the past 12 months. The company believes there were hacking attempts since last July but these were only discovered over the past week and is thought Continue reading Failure to protect data after hackers access 5.9m bank cards at Dixons Carphone","og_url":"https:\/\/www.gpsj.co.uk\/?p=4150","og_site_name":"Government & Public Sector Journal","article_published_time":"2018-06-13T16:21:17+00:00","article_modified_time":"2018-06-13T16:31:11+00:00","og_image":[{"url":"http:\/\/www.gpsj.co.uk\/wp-content\/uploads\/2017\/07\/IMG_2075-300x200.jpg","type":"","width":"","height":""}],"author":"The GPSJ Team","twitter_card":"summary_large_image","twitter_misc":{"Written by":"The GPSJ Team","Estimated reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.gpsj.co.uk\/?p=4150#article","isPartOf":{"@id":"https:\/\/www.gpsj.co.uk\/?p=4150"},"author":{"name":"The GPSJ Team","@id":"https:\/\/www.gpsj.co.uk\/#\/schema\/person\/d54386f99736367ec2789825fed93b4a"},"headline":"Failure to protect data after hackers access 5.9m bank cards at Dixons Carphone","datePublished":"2018-06-13T16:21:17+00:00","dateModified":"2018-06-13T16:31:11+00:00","mainEntityOfPage":{"@id":"https:\/\/www.gpsj.co.uk\/?p=4150"},"wordCount":714,"commentCount":0,"image":{"@id":"https:\/\/www.gpsj.co.uk\/?p=4150#primaryimage"},"thumbnailUrl":"http:\/\/www.gpsj.co.uk\/wp-content\/uploads\/2017\/07\/IMG_2075-300x200.jpg","keywords":["8MAN","Currys PC World","Cybersecurity","Data","Dixons Carphone","Dixons Travel stores","FCA","Government & Public Sector Journal","GPSJ","GPSJ Magazine","Hacked","Hacking","ICO","public sector","Simon Cuthbert","Stuart Littleford"],"articleSection":["IT & IT Security"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.gpsj.co.uk\/?p=4150#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.gpsj.co.uk\/?p=4150","url":"https:\/\/www.gpsj.co.uk\/?p=4150","name":"Failure to protect data after hackers access 5.9m bank cards at Dixons Carphone - Government & Public Sector Journal","isPartOf":{"@id":"https:\/\/www.gpsj.co.uk\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.gpsj.co.uk\/?p=4150#primaryimage"},"image":{"@id":"https:\/\/www.gpsj.co.uk\/?p=4150#primaryimage"},"thumbnailUrl":"http:\/\/www.gpsj.co.uk\/wp-content\/uploads\/2017\/07\/IMG_2075-300x200.jpg","datePublished":"2018-06-13T16:21:17+00:00","dateModified":"2018-06-13T16:31:11+00:00","author":{"@id":"https:\/\/www.gpsj.co.uk\/#\/schema\/person\/d54386f99736367ec2789825fed93b4a"},"breadcrumb":{"@id":"https:\/\/www.gpsj.co.uk\/?p=4150#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.gpsj.co.uk\/?p=4150"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.gpsj.co.uk\/?p=4150#primaryimage","url":"https:\/\/www.gpsj.co.uk\/wp-content\/uploads\/2017\/07\/IMG_2075.jpg","contentUrl":"https:\/\/www.gpsj.co.uk\/wp-content\/uploads\/2017\/07\/IMG_2075.jpg","width":3456,"height":2304},{"@type":"BreadcrumbList","@id":"https:\/\/www.gpsj.co.uk\/?p=4150#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.gpsj.co.uk\/"},{"@type":"ListItem","position":2,"name":"Failure to protect data after hackers access 5.9m bank cards at Dixons Carphone"}]},{"@type":"WebSite","@id":"https:\/\/www.gpsj.co.uk\/#website","url":"https:\/\/www.gpsj.co.uk\/","name":"Government & Public Sector Journal","description":"Public Sector, Government, business, stories and news along with latest developments, research, thought leadership, strategy, policy and insights","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.gpsj.co.uk\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Person","@id":"https:\/\/www.gpsj.co.uk\/#\/schema\/person\/d54386f99736367ec2789825fed93b4a","name":"The GPSJ Team","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/secure.gravatar.com\/avatar\/13cdd73dc4abbd6e05b80a0562c7c553a9104ad2e5e96ee20afca2c462894143?s=96&d=blank&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/13cdd73dc4abbd6e05b80a0562c7c553a9104ad2e5e96ee20afca2c462894143?s=96&d=blank&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/13cdd73dc4abbd6e05b80a0562c7c553a9104ad2e5e96ee20afca2c462894143?s=96&d=blank&r=g","caption":"The GPSJ Team"},"sameAs":["http:\/\/gpsj.co.uk"],"url":"https:\/\/www.gpsj.co.uk\/?author=3"}]}},"post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/www.gpsj.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/4150","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.gpsj.co.uk\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.gpsj.co.uk\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.gpsj.co.uk\/index.php?rest_route=\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.gpsj.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4150"}],"version-history":[{"count":5,"href":"https:\/\/www.gpsj.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/4150\/revisions"}],"predecessor-version":[{"id":4155,"href":"https:\/\/www.gpsj.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/4150\/revisions\/4155"}],"wp:attachment":[{"href":"https:\/\/www.gpsj.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4150"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.gpsj.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4150"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.gpsj.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4150"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}