EasyJet admits a cyber-attack has affected approximately nine million customers • Hacker News Board

Re: EasyJet admits a cyber-attack has affected approximately nine million customers

#161

Post by tomp » Fri, May 22, 2020, 3:27 PM UTC

gruez wrote: post #58

hadrien01 wrote: post #36

Earlier quoted context omitted.

In that case the data was clearly needed for the essential service EasyJet provides, it wasn't marketing data. According to the article, the data stolen was email addresses and travel details, and for some customers credit card details (for customers who asked EasyJet to save them)

I think the point is that the company keeps the data around forever when they only need for a few months after the trip, at most.

When I was applying for UK citizenship, they needed 5 years of all travel data (entry and exit into the UK). EasyJet's databases (and other flight providers') provided useful. Of course, you could wonder why the government even needs this data, or why they don't keep it themselves (I don't for a moment believe that UK government / spy agencies doesn't have all data about all flights in and out of the UK).

Re: EasyJet admits a cyber-attack has affected approximately nine million customers

#162

Post by wdb » Fri, May 22, 2020, 6:52 PM UTC

gryzzly wrote: post #114

wdb wrote: post #109

Earlier quoted context omitted.

Yes, I had something similar happening. Did your friend get anything paid out? It's still hurting me while it happened many years ago.

Unfortunately, my friend is not able to enter the said country where he once was a resident anymore. Without spending tens of thousands dollars without clear promise of success it seems impossible to resolve this. Perhaps after some long time the debt to bank is cleared. In reality, it is actually the bank that should be sued for all this – they haven’t checked identity properly before giving out loans worth of tens…

Yeah, I had something similar happen to me with a Swiss bank :( No loans they just emptied out my accounts and stock portfolio (I had lots of FAANG stock)

Re: EasyJet admits a cyber-attack has affected approximately nine million customers

#163

Post by trickstra » Sat, May 23, 2020, 4:21 AM UTC

sp0rk wrote: post #113

trickstra wrote: post #92

Earlier quoted context omitted.

Some banks can generate a virtual CC ad-hoc, so you could have different CC details per each transaction. It's rare, I wish my bank did it, but it exists.

> I wish my bank did it You can just use something like Privacy.com to accomplish the same thing.

Sadly, that service is only available for 4.3% of the population.

Re: EasyJet admits a cyber-attack has affected approximately nine million customers

#164

Post by jimkleiber » Sun, May 24, 2020, 11:12 PM UTC

bigwavedave wrote: post #151

jimkleiber wrote: post #147

Earlier quoted context omitted.

I'm not sure to which part you're referring...ask them what?

I believe he's suggesting that since you don't collect any more data than necessary, you ask the users how they use your app instead.

ah, yes, I do ask them when I get the chance. Sometimes it would be a lot easier to just monitor them without having to ask. I mean, I'm sure it's a sliding scale of privacy/automation, but I still like doing it more manually, or rather, with more intentional consent.