A misconfigured database holding personal data was left available online between April 2019 and February 2020.
Virgin Media could pay up to £4.5 billion (US$5.6 billion) in compensation to customers affected in a security incident that exposed the personal details of some 900,000 people.
Between April 2019 and late February 2020, a misconfigured database exposed customer information including full names, email addresses, birthdates, and contact phone numbers. For some users, it exposed requests to block or unlock pornographic or explicit content. If accessed, the data could give cybercriminals means to launch phishing attacks of blackmail customers.
Your Lawyers, a UK-based consumer action and data breach compensation law firm, is representing claimants pursuing compensation as a result of the leak. Those who have received confirmation they were affected could be entitled to thousands of pounds, the firm says. The average compensation claim for financial and emotional distress could total £5,000 per claimant.
"Virgin Media failed to take the steps required to keep customer data safe," said Aman Johal, director at Your Lawyers, in a statement. "It is vital for the company to understand the severity of this breach."
When data is left exposed, it's "open season" for fraudsters to scam vulnerable people, he adds. "Your Lawyers has formally notified Virgin Media that we are taking action and our claimant base is growing daily."
Those affected are urged to make a claim as soon as possible. Read more details here.
Check out The Edge, Dark Reading's new section for features, threat data, and in-depth perspectives. Today's featured story: " How to Evict Attackers Living Off Your Land."
About the Author(s)
You May Also Like
Unleash the Power of Gen AI for Application Development, Securely
March 19, 2024The Anatomy of a Ransomware Attack, Revealed
March 20, 2024How To Optimize and Accelerate Cybersecurity Initiatives for Your Business
March 26, 2024Building a Modern Endpoint Strategy for 2024 and Beyond
March 27, 2024Building a Modern Endpoint Strategy for 2024 and Beyond
March 27, 2024