Incident
incident:talktalk_incident
Also: TalkTalk attack, TalkTalk hack
Cybersecurity incident involving exploitation of a TalkTalk subdomain, theft of customer data, and an attempted Bitcoin ransom demand.
Cybersecurity incident involving exploitation of a TalkTalk subdomain, theft of customer data, and an attempted Bitcoin ransom demand.
“this TalkTalk incident was quite the thing.”
“I decided to send a ransom demand basically demanding Bitcoin”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | COMPROMISES | TalkTalk | Explicit | 117 |
| outgoing | INVOLVES | SQL injection | Explicit | 117 |
| outgoing | INVOLVES | Daniel Kelley | Explicit | 117 |
TalkTalk incident COMPROMISES TalkTalk
The TalkTalk incident involved unauthorized access to TalkTalk's network and theft of substantial amounts of data.
Explicit Confidence 99% · Jack Rhysider EP 117 Details
“get into TalkTalk’s network and start moving around and stealing data”
TalkTalk incident INVOLVES SQL injection
The incident began with an SQL injection vulnerability on a TalkTalk subdomain.
Explicit Confidence 99% · Daniel Kelley EP 117 Details
“What he’s effectively found is an SQL injection on a subdomain”
TalkTalk incident INVOLVES Daniel Kelley
Daniel was involved in the incident by using data obtained from the TalkTalk breach to send a ransom demand, although he says a friend carried out the database download.
Explicit Confidence 98% · Daniel Kelley EP 117 Details
“I had access to this data and I basically decided to gather all of the e-mails from the data”