Sky customers told to change password following possible data breach
Suspected email breach leads to security worries for Sky
Sky customers have been told to change their passwords immediately, raising fears that the company may have been hit by a data breach.
The company has sent out emails to customers across the UK urging them to reset their passwords as part of a "security measure".
The email contains a link for users to choose a new passwords as Sky has had to change their existing logins, raising fears that the company has suffered some kind of breach or attack.
- Best antivirus services of 2019
- These are the best password managers around
- Best anti-malware software of 2019
'Incident'
"At Sky we take the security of your data and information extremely seriously. To help keep your account safe we have reset the password for your Sky account," the email read.
Several Sky customers took to Twitter to ask Sky if the emails were genuine, or part of a phishing scam, with the firm's official Sky Help Team account replying that they were.
‘To help keep customer’s accounts safe we occasionally reset the password for Sky accounts. Customers can reset their password online at Sky.com,’ a Sky spokesperson said, adding that the company has not been breached.
However the account also told some customers that the reset was linked to "part of the incident that happened last week", possibly referencing a recent attack.
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
"We have been informed by the provider of Sky.com email that a number of email accounts have been accessed without permission," its official disclosure on the incident read, "as a precautionary measure these accounts have been locked."
According to Forbes, this apparently concerns a breach of email accounts on an unspecified date, and could even be linked to the Yahoo 2014 data breach, as the American firm provides the sky.com email.
However Sky's disclosure on the attack was undated, making it hard to know when the incident occured. It does mention that it concerns a "credential stuffing" attack, where hackers bombard a service with user login details (often stolen or bought on the Dark Web) in an attempt to breach user accounts.
Sky says it has already locked the accounts of all affected users, who will need to contact the company to get control back.
- The best Sky broadband deals in July 2019
- Via Forbes
Mike Moore is Deputy Editor at TechRadar Pro. He has worked as a B2B and B2C tech journalist for nearly a decade, including at one of the UK's leading national newspapers and fellow Future title ITProPortal, and when he's not keeping track of all the latest enterprise and workplace trends, can most likely be found watching, following or taking part in some kind of sport.