The UK 's Information Commissioner 's Office ( ICO ) has fined TalkTalk a record £ ##500 for poor website security in 2015 , which allowed hackers to steal the personal data of nearly 157,000 people , including 16,000 who had their bank details stolen . The out - of - date database software was breached using a well - known hacking technique called SQL injection ; restrictions were by - passed because the company was unaware of a bug that could easily have been fixed . "In spite of its expertise and resources, when it came to the basic principles of cyber-security, TalkTalk was found wanting," said Ms Denham. " When it came to the basic principles of cyber - security , TalkTalk was found wanting , " said the ICO .
The UK 's Information Commissioner 's Office ( ICO ) has fined TalkTalk a record £ ##500 for poor website security in 2015 , which allowed hackers to steal the personal data of nearly 157,000 people , including 16,000 who had their bank details stolen . The out - of - date database software was breached using a well - known hacking technique called SQL injection ; restrictions were by - passed because the company was unaware of a bug that could easily have been fixed . " When it came to the basic principles of cyber - security , TalkTalk was found wanting , " said the ICO .