Statement from Sky on ACS:Law

[NewsreadeR]

Following on from our report yesterday, Sky have now sent us the following statement.

Attributable to a Sky spokesperson:

Statement from Sky on ACS:Law

We are very concerned at the apparent security breach involving data held by ACS:Law. At this stage of our investigation, we believe that the data included the names and addresses of around 4,000 Sky Broadband customers.

Like other broadband providers, Sky can be required by Court Order to disclose information about customers whose accounts are alleged to have been used for illegal downloading. We only ever provide such data in encrypted form and we never disclosed credit card or bank details to ACS:Law.

[Angel_Rex]

So, sky use dynamic IP addresses, how on earth do they tell who has been using what?

Often when I have had a sky IP ive been blocked from sending emails using my own emails, others are fine. I personally dont DL illegally but what if some one else was using an IP power cyled the routher now i had it.... or some one else?

[Jane masters]

I guess ACS:Law were not PCI DSS compliant, and may not even have done an assessment. But the companies that passed on credit card details have probably just let themselves in for some huge fines and increased card processing charges.

Payment Card Industry Data Security Standard (PCI DSS)
https://www.pcisecuritystandards.org.../pci_dss.shtml

[Isitme]

I think the credit card details have been given by the accused to ACS. It is now being publicised by the BBC so those who are effected and don't frequent the various forums who are discussing the subject should be aware that they should be cancelling their cards. Apparently the full details required to use the cards are given, which does not say much for those who have published them on line. Surely they could have made their point without giving out the full details.

[RJM]

I guess ACS:Law were not PCI DSS compliant, and may not even have done an assessment. But the companies that passed on credit card details have probably just let themselves in for some huge fines and increased card processing charges.

Payment Card Industry Data Security Standard (PCI DSS)
https://www.pcisecuritystandards.org.../pci_dss.shtml

This, has just opened "one big can of worms".

I would imagine a few people will be looking for new jobs.

The new rules are very strict of what you can and not do with a client's credit card details.

[chronic]

Just been onto sky to see what they have to say about this, the first person I spoke to had never heard of the problem, so he put me on hold and went for more info.

I was told Sky have setup a Department for people who are concerned by this should phone 02071932493 for more information..

Hope this helps...

[deadman1984]

anyone have the full list like in excel format or html format where i can view it to see if im affected

[Isitme]

If you received a letter from Sky advising you that your details had been requested by court order, your name will probably be on the list.

[deadman1984]

when did sky send thease letters out

[Isitme]

A member here has recently received one.
http://www.skyuser.co.uk/forum/sky-n...-heads-up.html

I think most of the published names have been downloading porn, you wouldn't do that would you?