Re: "'Scammers stole £40k after EDF gave out my number"

On 2025-03-20 10:42, Nick Finnigan wrote:

On 17/03/2025 18:44, Java Jive wrote:

On 2025-03-17 14:53, Nick Finnigan wrote:

On 17/03/2025 13:53, Java Jive wrote:

On 2025-03-17 08:53, Nick Finnigan wrote:

On 16/03/2025 18:00, Theo wrote:

In uk.telecom.mobile Java Jive <java@evij.com.invalid> wrote:

>
No, how would he have known the answers to the security questions to
enable the SIM swap, and his emails were from Virgin Media, while the
SIM was from O2.  Although not initially, my reading of the original
article is now unambiguously that the email hack preceded the SIM swap
and provided the initial personal information necessary to accomplish
everything that followed.

>
Virgin Media O2 are one company - VM and O2 merged June 2021.  I don't know
whether they have merged customer accounts such that the same security
details are used for both.  In which case it may be that one set of details
gives access to both mobile and emails.

>
"If you've linked your Virgin Media and O2 details to create a new Virgin Media O2 ID, sign in with it here."
>
https://accounts.o2.co.uk/signin

>
But Theo's own transcription of events from the BBC Radio documentary makes clear that he had not done so (first and last entries from this excerpt):

>
  That does not make it clear to me (he would still have an O2 password as well as a VM/O2 password).

>
I disagree, your own quote shows that if it was a joint account for both, he'd only have needed the one password, whereas the Theo's transcription makes it plain that there were two.

   He would still have an O2 password, as well as a VM/02 password.
  (See the O2 website)

So I did ...
https://www.virginmedia.com/support/help/linked-virgin-media-o2-id
"... once you’ve done this you’ll only need to use your new Virgin Media O2 details to sign in to both My Virgin Media and My O2 (and any other online spaces you’d usually use your My Virgin Media or My O2 details to sign in to)."
The above and their their login page in conjunction with Theo's transcription makes it clear that in this instance he had two separate logins for two separate accounts, because with the O2 one he was advised by a text that his password had been changed, whereas with the VM one he wasn't advised at all that his password had been changed until he tried to contact them, whereas if he's been using a single account for both, one one or the other would have applied, not both.  Further, when he corrected the change of password with the first, O2, it would have applied automatically to the second, VM, as simply it would have been the same account.
--
Fake news kills!
I may be contacted via the contact address given on my website: www.macfh.co.uk