Potential data breach at virgin media
Its my belief that a data breach has occurred at Virgin Media and worse still they maybe trying to cover it up.
When the account was setup with Virgin Media they were provided an email address that does not exist anywhere else and is only used for admin purposes with VM. I create personalised email addresses for even supplier so that I can easily find emails and when I leave I cancel the email address cutting them off and should they leak my email address to someone else then I can trace it back to source.
Around three months ago I started receiving emails to the address only given to VM. I contacted that source and asked them where they had got the address from.
They said it was within a list they had bought as cleared email addresses to use for marketing reasons.
I ask for that source and they provided the details, so I know exactly who gave it to them.
I contacted the privacy team at VM and asked if they had shared my email address with anyone.
The first response was that they do not share any information with anyone and shut me down.
I went back, this time giving them a copies of the marketing emails and again asked how this other company had obtained an email address only shared with VM.
This time, I received a telephone call from VM. The person said that they had conducted an investigation and my email address had not been shared with anyone. He then said that he had gone online and searched public marketing databases that had been breached for my email address.
At that point I asked him, what permission he had to put my personal email address into a public search facility, he became very coy and wouldn’t answer. I asked him if he were part of the data privacy team or legal team and he said no. I suggested he go back and speak with someone trained in data matters and get clarification as he has just violated my privacy again!
A couple of days later I received an automated email from the company that bad been sending marketing information saying that my request to change email address had been processed and gave me the IP of the request.
The email address it was changed to was my general email address and the IP address was a virgin media IP.
So it seems someone on a VM connection that had both the original email address that was only known to VM and the general email address I use as a throw away email address had gone to that company and requested a change. Very suspicious.
I’ve been back to VM and they are being very silent and refuse to respond. They’ve only got a few days left before I report them to the ICO for a potential data breach, I also intend to explain that I believe VM have also tried to cover up the breach.
Be on your guard people, it looks like VM are sharing email addresses deliberately or by accident with other companies.