← Dixons Carphone

2017 Dixons Carphone — 5.6M cards, 10M records

2017 10.0M records affected Share on X

Data compromised

Payment cards, names, postcodes, emails

Technical writeup

Malware on 5,390 POS terminals across Currys PC World, Dixons Travel. July 2017–April 2018. 5.6M payment cards, 10M personal records (names, postcodes, emails, failed credit checks). ICO fined £500K.

Root cause

POS malware; inadequate patching, firewalls, segregation

References