A service hosted on the website of TF1 hacked – BBC

Nearly two million data belonging to clients of a subscription service available on TF1.fr were stolen. The string returns responsibility to its trading partner.

The year 2015 also began badly for TF1 as 2014 for Orange. There is one year, the telephone company had been stealing the details of 800,000 customers. Three months later, 1.3 million data subscribers that had been pirated. This year it is the turn of the audiovisual group to undergo such a mishap. But unlike Orange, this is not the chain that was attacked, but a subscription service for magazines, hosted on its site and managed by Viapresse, TF1 trading partner.

Hackers who sign their actions under the pseudonym Linker Squad, claim and stealing personal data of nearly two million subscribers TF1. This attack of great magnitude was discovered Friday, January 2

TF1 replica. “This affects subscribers of this service provider [Viapresse], which has a window on TF1.fr”

.

“At no time, users enrolled in TF1.fr data and managed by TF1 were not exposed or pirated”

n prevents, hackers say they have exploited a technical loophole to get their hands on buyers coordinates. “They clearly advertised and they proved it by screen sensors, they have access to all the information that a customer could give,” said RTL Damien Bancal, cybercrime specialist who discovered this piracy. They announced to access data such as bank details. “From these elements, the whole digital identity of the user who finds himself in their hands,” said Damien Bancal. According to him, this can lead to “identity theft”, “embezzlement”, see “use to launch other scams, now or later.”

Alerted, the site administrators have corrected the technical fault. The group reassured subscribers. “At no time, users enrolled in TF1.fr data and managed by TF1 have been exposed or pirated, the group said in a statement Saturday. The site offers these subscriptions, although referenced under the tf1.fr URL, is under the exclusive control of the partner, regardless of site management tf1.fr by teams of TF1. ”

The chain ensures that the business partner Viapresse “took over the incident since its detection in conjunction with teams from eTF1, which have removed access to this site” and “requested the deletion of site. ” The URL (web address) managed by the claimant was no longer active Saturday at noon. “We will settle our differences with the defaulting partner in the business secret. It goes without saying that TF1 will defend its interests at the level of the injury suffered, “said in an email Olivier Abecassis, CEO eTF1.