Friends jailed over huge cyber attack that cost TalkTalk £77m
TWO young computer geeks were jailed yesterday for masterminding a catastrophic data hack that cost TalkTalk £77million.
Connor Allsopp and Matthew Hanley caused misery for thousands when they brought the mobile phone network to its knees.
They were at the centre of a plot to steal sensitive customer data including banking details. Although it was one of the biggest data breaches in history, Hanley was jailed for just 12 months and Allsopp for eight at the Old Bailey yesterday.
Former TalkTalk chief executive Dido Harding received a blackmail demand for more than £285,000, sparking a Scotland Yard investigation.
The security breach began in October 2015 when hackers discovered weaknesses in how TalkTalk stored sensitive customer information.
The alarm was sounded when Mrs Harding was sent a demand for a ransom paid in Bit- coins in exchange for a huge cache of stolen data. Some 1,707 tables with 439,365,020 rows of data, more than 1.6million of which were sensitive, were taken by hackers.
Prosecuting, Peter Ratliff said: ‘Matthew Hanley was, up until his arrest on October 31 2015, a determined and dedicated hacker. He was entirely aware of the risks he was taking and the illegality of what he was doing.’
Hanley, 23, supplied material which allowed others to steal the information and use it for fraud.
He passed a computer file containing personal data to Allsopp, 21, before it was given to another hacker known as ‘Reign’. The only evidence against Hanley came from Skype conversations because he wiped his computer files clean before he was arrested.
In one conversation with a user called ‘Simplyediting’, he boasted: ‘I’m dumping the TalkTalk ISP database haha’.
When officers came to his house to arrest him he was in bed, and told them: ‘I know who did it.’ His barrister Darron Whitehead said he ‘joined the party’ of up to ten hackers and ‘the majority of his actions were to gain respect among his peers.’
He said the hacker dropped out of school aged 15, was ‘socially inept’ and unable to leave the house, adding: ‘He wasn’t as good as he thought he was.’ The laptop which Allsopp used has never been recovered.
His barrister said he had no previous convictions, was immature and would not ‘adapt well’ to being in prison.
Hanley and Allsopp, admitted fraud and offences under the Computer Misuse Act.
Jailing the pair, both from Tamworth, Staffordshire, Judge Anuja Dhir said: ‘I am sure your actions caused misery and distress to many thousands of the customers at TalkTalk. You were not personally involved, but your actions facilitated it.
‘It is of the first importance that the court sends a clear message. Illegal activities on this scale are not a game.’
TalkTalk was fined a record £400,000 for its ‘car crash’ security failings which led to the crime.
‘Wasn’t as good as he thought he was’