5 ms·

Co-op (UK) boss confirms all 6.5M members had data stolen

20 points by mmarian 1y ago

chrisjj 1y ago
> "I'm devastated that information was taken. How about devastated that you allowed it to be taken?
- happymellon 1y ago
  How did she "allow it to happen"? I may of missed something, but I understood that these were direct attacks that exploited phishing attacks. Was she advised to do something, or allow other people to do something that she denied? IMHO the statement should be > I'm devastated that this happened despite our best efforts to prevent this type of attack, and this is what we are going to do to try and make this right. With the ability of AI to generate pitch perfect voices, it's getting harder to vet things. Especially if the person has already been phished.
  - deleted 1y ago
    [deleted]
  - chrisjj 1y ago
    > How did she "allow it to happen"? Inadequate security. > I may of missed something, but I understood that these were direct attacks that exploited phishing attacks. So? > IMHO the statement should be > I'm devastated that this happened despite our best efforts to prevent this type of attack It seems she decided instead to stick to the truth.
    - happymellon 1y ago
      > Inadequate security. Citation please.
      - chrisjj 1y ago
        https://www.coop.co.uk/cyber-incident-faqs https://www.coop.co.uk/cyber-incident-faqs bullet #1.
- sillystu04 1y ago
  That sounds dangerously close to victim blaming. Obviously if Co-op were negligent in their handling of member data they're also guilty of something. But even the best organisations have some level of exposure to phishing related attacks.
  - chrisjj 1y ago
    Phishing? Says who? Not the target. https://www.coop.co.uk/cyber-incident-faqs https://www.coop.co.uk/cyber-incident-faqs
    - happymellon 1y ago
      That says absolutely nothing.
      - chrisjj 1y ago
        And not phishing.
        happymellon 1y ago
        And not lack of security.
        chrisjj 1y ago
        That's bullet #1. ____ We recently experienced a cyber incident where malicious third parties attempted to access our systems. As part of this, data was extracted from one of our systems.
        happymellon 1y ago
        Which could be due to phishing and not a lack of security.
  - bendigedig 1y ago

20 points by mmarian 1y ago

chrisjj 1y ago

> "I'm devastated that information was taken. How about devastated that you allowed it to be taken?

happymellon 1y ago
How did she "allow it to happen"? I may of missed something, but I understood that these were direct attacks that exploited phishing attacks. Was she advised to do something, or allow other people to do something that she denied? IMHO the statement should be > I'm devastated that this happened despite our best efforts to prevent this type of attack, and this is what we are going to do to try and make this right. With the ability of AI to generate pitch perfect voices, it's getting harder to vet things. Especially if the person has already been phished.
- deleted 1y ago
  [deleted]
- chrisjj 1y ago
  > How did she "allow it to happen"? Inadequate security. > I may of missed something, but I understood that these were direct attacks that exploited phishing attacks. So? > IMHO the statement should be > I'm devastated that this happened despite our best efforts to prevent this type of attack It seems she decided instead to stick to the truth.
  - happymellon 1y ago
    > Inadequate security. Citation please.
    - chrisjj 1y ago
      https://www.coop.co.uk/cyber-incident-faqs https://www.coop.co.uk/cyber-incident-faqs bullet #1.
sillystu04 1y ago
That sounds dangerously close to victim blaming. Obviously if Co-op were negligent in their handling of member data they're also guilty of something. But even the best organisations have some level of exposure to phishing related attacks.
- chrisjj 1y ago
  Phishing? Says who? Not the target. https://www.coop.co.uk/cyber-incident-faqs https://www.coop.co.uk/cyber-incident-faqs
  - happymellon 1y ago
    That says absolutely nothing.
    - chrisjj 1y ago
      And not phishing.
      - happymellon 1y ago
        And not lack of security.
        chrisjj 1y ago
        That's bullet #1. ____ We recently experienced a cyber incident where malicious third parties attempted to access our systems. As part of this, data was extracted from one of our systems.
        happymellon 1y ago
        Which could be due to phishing and not a lack of security.
- bendigedig 1y ago