[BreachExchange] Oxford and Cambridge Club hit by online data breach

[Audrey McNeil]

http://www.thehindu.com/news/international/oxford-and-
cambridge-club-hit-by-online-data-breach/article20944258.ece

The Oxford and Cambridge Club, one of the United Kingdom’s most elite
gentlemen’s clubs open to alumni of the universities of Oxford and
Cambridge, has called in the police and private investigators after being
hit by the theft of online data of its 5,000 members.

A backup computer drive, described as the size of a toaster, was taken from
a locked room inside the club’s headquarters in Pall Mall, central London,
earlier this month.

The information on the hard drive includes members’ names, home and email
addresses, phone numbers, some bank account details, dates of birth and
even photographs.

Queen Elizabeth II’s husband, Prince Philip, and son, Prince Charles, who
are both honorary members, are not affected by the break-in, 'The Sunday
Telegraph' reported.

'Look out for suspicious activity'

Alistair Telfer, the club’s secretary, has written to all members by email
and followed it up with a letter — seen by the newspaper — urging them to
check bank accounts regularly for "suspicious activity."

"We have been advised that we should write to confirm that there may have
been a data breach at the Club which could possibly result in disclosure of
your personal data held on the Club computer system," he wrote.

He has added: "This situation has arisen as a result of the theft of a
storage disk, and not as a breach of the cybersecurity system, and although
the data contained on the disk is protected by multiple layers of security
and heavy password protection, we have been advised by data specialists
that there is a very remote chance that information could be obtained.

“The management team would like to extend their apologies for the
inconvenience caused by this unfortunate incident.”

No credit/debit card details

The club stressed that no credit or debit card details were contained on
the database.

The club’s management has called in Scotland Yard and also hired private
investigators to get to the bottom of the theft.

Metropolitan Police officers are studying CCTV footage as part of their
investigation.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.riskbasedsecurity.com/pipermail/breachexchange/attachments/20171127/cb1a44e9/attachment.html>