Hackers jailed for cyber attack that hit Talktalk customers
TWO friends have been jailed for a “sophisticated” Talktalk cyber attack that caused “misery and distress” to thousands of customers.
Matthew Hanley, 23, and Connor Allsopp, 21, were yesterday sentenced to a combined total of 20 months for their involvement in the massive October 2015 data breach. The pair stole personal information, banking details and “sensitive” data from 156,959 customer accounts in a hacking exercise that spanned seven days, the Old Bailey heard.
The total cost of the breach to Talktalk is estimated to be £77 million, including a record £400,000 fine from the Information Commissioner’s Office for security failings that allowed the hack to happen.
Judge Anuja Dhir yesterday sentence Hanley to 12 months and Allsopp to eight months, saying it was a tragedy to find “two individuals of such extraordinary talent” in the dock.
She said: “You were both involved in a significant, sophisticated, systematic hack attack in a computer system used by Talktalk. The total loss to Talktalk as a result of this overall attack is estimated to be £77million, but the loss does not end there.
“Given the scale of the attack, the number of people whose confidential information was stolen and then passed on to others, I’m sure that your actions caused misery and distress to many thousands of customers.”
The court heard how analysis by BAE Systems after the attack suggested there may have been up to 10 other attackers, some of whom used the confidential data to blackmail Talktalk’s then-ceo Dido Harding.
Ms Harding received demands for Bitcoins in return for the stolen data, which included customers’ names, email addresses, mobile numbers, home addresses and dates of birth.
“Your actions, the actions of others, resulted in the then-ceo of Talktalk being subjected to repeated attempts to blackmail her for money. You were not personally involved in making those attempts but your actions helped facilitate it,” Judge Dhir said.
The court heard how Talktalk spotted “latency issues” on its website on Oct 21, 2015 and reported the cyber attacks to the police and the National Crime Agency. The next day it made public statements to alert customers.
Hanley was described as a “determined and dedicated hacker”.