Intelligent CISO Issue 06 | Page 25

threat updates
UK
Superdrug released a statement stating there had been ‘ an event ’ which may have resulted in the possible disclosure of some customers ’ personal information . The statement said : “ This does not include payment card information but could include customers ’ names , addresses and , in some instances , date of birth , phone number and points balances . As a security precaution we have advised all customers to change their online passwords . We are aware that some customers are experiencing difficulties in doing so – we appreciate this is very frustrating and we are doing everything we can on this .”
The company said it had contacted police and Action Fraud ( the UK ’ s national fraud and cybercrime arm ) and would be providing all the information needed for the investigation .
EUROPE / UK
British Airways announced it was investigating the theft of customer data from its website and mobile app .
The airline , one of Europe ’ s largest , said the stolen data did not include travel or passport details and that the incident was being investigated as a ‘ matter of urgency ’. In a statement released online , the company said that , from 10.58pm on August 21 2018 until 9.45pm ( BST ) September 5 this year inclusive , the personal and financial details of customers making bookings on its website and app were compromised .
Anyone who believes they might have been affected is urged to contact their bank or credit card provider and follow their recommended advice .
www . intelligentciso . com | Issue 06
25