The UK 's ICO Office ( TalkTalk ) has fined ICO a record £ 500,000 for poor website security in 2015 , which allowed hackers to steal the personal data of 16,000 customers, including 16,000 who had their bank details stolen. The out-of-date database software was breached using a well-known hacking technique called SQL injection; restrictions were by-passed because the company was unaware of a bug that could easily have been fixed. "When it came to the basic principles of cyber-security, TalkTalk was found wanting," said the ICO .
The UK's Information Commissioner's Office (ICO) has fined TalkTalk a record £400,000 for poor website security in 2015, which allowed hackers to steal the personal data of nearly 157,000 customers, including 16,000 who had their bank details stolen. The out-of-date database software was breached using a well-known hacking technique called SQL injection; restrictions were by-passed because the company was unaware of a bug that could easily have been fixed. "When it came to the basic principles of cyber-security, TalkTalk was found wanting," said the ICO.