Financial info secure, firm says in post-breach statement

Nov 18, 2016 10:31 GMT  ·  By

Hackers have managed to break into Three UK’s network database in an attempt to steal high-end smartphones, but details of no less than 6 million customers might have also been exposed in the process.

Specifically, the attackers accessed the customer upgrade database using an employee login, reaching servers that stored personal customer information, such as names, phone numbers, addresses, and dates of birth.

In a statement that was posted on Facebook, Three confirmed the hack, but said that no financial information was stolen.

“We’re aware of an attempted fraud issue regarding upgrade devices and are working with police and relevant authorities on the matter. The objective was to steal high-end smartphones from Three, but we’ve already put measures in place to stop the fraudulent activity,” the company said.

“We’d like to reassure customers that their financial details are not at risk. We are investigating how many customers are affected and will be contacting them as soon as possible. We’ll update with further information once we have this.”

Hackers already arrested

The mobile phone company explained that hackers most likely attempted to get the new phones in order to sell them online, and it looks like at least 8 flagships were stolen as a result of the breach. Customers whose information was stored on compromised servers have not yet been informed, but Three UK will contact them as soon as possible.

“We’ve been working closely with the Police and relevant authorities. To date, we have confirmed approximately 400 high value handsets have been stolen through burglaries and eight devices have been illegally obtained through the upgrade activity,” the company says.

A report from Daily Mail reveals that three men have already been arrested, including a 48-year-old individual from Orpington, Kent, and a 39-year old man from Ashton-under-Lyne, Manchester. A third fraudster from Moston, Manchester, was also arrested.

The eight Three customers whose customer upgrade accounts were used to order the flagships, possibly involving iPhones and high-end Samsung devices, have already been contacted, the firm said.