Carphone and Talktalk: the same weakness?
Okay, a few months ago there was a breach at Carphone Warehouse (okay, Dixons Carphone), and my personal data was compromised. Now there is this one at TalkTalk, and my personal data has been compromised again.
CPW and Talktalk are separate companies, but they used to be the same company and one was spun off the other. I suspect they use a lot of the same systems, and share a lot of common code for their customer systems and/or websites. (To add to the complications, both companies are the product of a lot of mergers / acquisitions, so there are probably lots of barely compatible things lashed together as well).
I wonder if it is possible that both data breaches came from exploiting the same/similar weaknesses. It wouldn't surprise me at all if they did.
Biting the hand that feeds IT
