Feeds

Staff at UK mobile co sold customer records

Info Commissioner recommends jail for miscreants

Internet Security Threat Report 2014

Updated Staff at an unnamed mobile operator have been selling customer details to the competition, and the Information Commissioner reckons that it will take a spell in chokey to stop the leaks.

According to the BBC, a T-Mobile spokesman has confirmed that T-Mobile is the company in question. The spokesman tells the BBC that the company alerted the Information Commission, saying that the data was sold "without our knowledge."

Customers numbering "many thousands" have had their details - including contract-renewal dates - lifted by staff working at the operator in question and sold to agents, who then cold-call the customers to offer alternative contracts. But the Information Commissioner complains that fining the ne'er-do-wells isn't enough, and suggests that locking them away is the only language they'll understand.

The details come as part of the Commissioner's ongoing campaign in favour of government proposals to introduce a prison term for those in breach of the Data Protection Act. This demonstrates that it's not just banks and doctors who have commercially-valuable information that can be stolen by individuals employed by the company.

In this case, it was enough information for a broker to call up just before a contract expires and offer an alternative, for which the brokers have apparently paid "substantial amounts of money". So much money, according to the Commissioner, that the threat of a fine is simply ineffective:

"The existing paltry fines... are simply not enough to deter people from engaging in this lucrative criminal activity. The threat of jail, not fines, will prove a stronger deterrent."

Given the number of cold calls received by every mobile phone user in the UK it would be tempting to think the information wasn't that valuable - but we don't know exactly what other information could have been exposed. Plus there is also an obvious principle at stake.

Strengthening Section 55 of the Data Protection Act could make it riskier for journalists to find information, though apparently we'll get a "public interest" defence to go with the new custodial sentences. ®

Updated: This story has been updated to include mention of the BBC's story on the matter.

Business security measures using SSL

More from The Register

next story
Brit telcos warn Scots that voting Yes could lead to HEFTY bills
BT and Co: Independence vote likely to mean 'increased costs'
Phones 4u slips into administration after EE cuts ties with Brit mobe retailer
More than 5,500 jobs could be axed if rescue mission fails
New 'Cosmos' browser surfs the net by TXT alone
No data plan? No WiFi? No worries ... except sluggish download speed
Radio hams can encrypt, in emergencies, says Ofcom
Consultation promises new spectrum and hints at relaxed licence conditions
Blockbuster book lays out the first 20 years of the Smartphone Wars
Symbian's David Wood bares all. Not for the faint hearted
Bonking with Apple has POUNDED mobe operators' wallets
... into submission. Weve squeals, ditches payment plans
This flashlight app requires: Your contacts list, identity, access to your camera...
Who us, dodgy? Vast majority of mobile apps fail privacy test
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
WIN a very cool portable ZX Spectrum
Win a one-off portable Spectrum built by legendary hardware hacker Ben Heck
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Security and trust: The backbone of doing business over the internet
Explores the current state of website security and the contributions Symantec is making to help organizations protect critical data and build trust with customers.