4 ms·
> A person with insider knowledge stole data including names, addresses, birth dates, and bank account information, the world’s second-biggest mobile-phone carr
by sehrope 13y ago
> A person with insider knowledge stole data including names, addresses, birth dates, and bank account information, the world’s second-biggest mobile-phone carrier said in a statement today.
Am I correct in understanding that the data stolen is Vodafone's customer payment details (ex: for auto payments)? At first read I thought that Vodafone had gotten into banking but I don't think that makes sense.
> The hacker had no access to credit-card information, passwords, PIN numbers or mobile-phone numbers, Vodafone said.
Credit card numbers and passwords I can understand as not being accessible (both can be either escrowed or hashed) but I don't see how it's possible to not have access to mobile phone numbers. If Vodafone is anything like US carriers then your phone number is basically your account number (sometimes a couple extra digits, ususally nothing though). Does anyone really think they have a separate account # per customer with the just the above data referenced to it?
- Mithaldu 13y agoVodafone also does DSL and other business (and actually tracks me as two different customers for DSL and mobile stuff). It's quite likely that they've got a seperate id system.
- objclxt 13y ago> If Vodafone is anything like US carriers then your phone number is basically your account number Although to the customer it may appear that your phone number is your account number, that normally isn't the case. This is for a number of reasons: * Phone numbers can change either through porting or by choice (i.e, due to nuisance/harassment, etc) * Single 'accounts' can have multiple phone numbers (i.e, a family plan) * Some plans may have phone numbers that are opaque to the user (i.e, 3G dongles, etc) In the carrier systems I've seen / worked on there has normally been a unique account identifier that isn't the MSISDN.