{"id":35966,"date":"2023-10-11T09:29:46","date_gmt":"2023-10-11T08:29:46","guid":{"rendered":"https:\/\/www.ispreview.co.uk\/?p=35966"},"modified":"2023-10-20T08:33:26","modified_gmt":"2023-10-20T07:33:26","slug":"lyca-mobile-uk-confirm-personal-data-breached-by-hackers","status":"publish","type":"post","link":"https:\/\/www.ispreview.co.uk\/index.php\/2023\/10\/lyca-mobile-uk-confirm-personal-data-breached-by-hackers.html","title":{"rendered":"Lyca Mobile UK Confirm Personal Data Breached by Hackers"},"content":{"rendered":"

Mobile operator Lyca Mobile<\/a>, which last week confirmed that it had been struck by a serious cyberattack that disrupted their systems and connectivity services across the UK (as well as in various other countries), has now confirmed that the hackers also “accessed at least some of the personal information held in our systems<\/em>“.<\/p>\n

Just to recap. Customers first began noticing problems on Friday 29th September 2023 (around midday), with many reporting that they\u2019d been unable to make mobile calls or send text (SMS) messages, while others struggled to contact customer support or to top up their credit via Lyca\u2019s website. The connectivity problems in particular were quite sporadic, affecting some users but not others.<\/p>\n

NOTE:<\/strong> Lyca is a Mobile Virtual Network Operator (MVNO) on EE<\/a>\u2019s platform in the UK.<\/div>\n

The operator’s latest update notes that they “first became aware of this on 30th September and took immediate action to contain the incident<\/em>“, which included isolating and shutting down systems where appropriate, while also instructing security and other experts to help them investigate, protect customer data and restore their systems.<\/p>\n

However, at the time of Lyca’s previous update on 3rd October (here<\/a>), the operator was still investigating whether any personal data had been compromised and as part of that they proclaimed to be “confident that all our records are fully encrypted<\/em>.” But the latest update<\/a>, which was posted just before the weekend (sorry we didn’t spot it up until now), appears to contradict this and indicates that the “attackers have accessed at least some of the personal information<\/em>” they hold.<\/p>\n

Lyca’s Statement<\/strong><\/p>\n

It will take some time to fully complete our investigations and carefully restore all of our systems, but it is now clear to us that the attackers have accessed at least some of the personal information held in our systems. We now believe this includes at least some customer data, so we are writing to advise you to be vigilant in case of any suspicious activity.<\/p>\n

The main types of personal information which we hold in connection with our customers are set out below.<\/p>\n