Tesco reports that services are back to normal after some disruption over the weekend. However as with any cybersecurity incident, action continues to be taken to check if any other systems are compromised – but I have changed my Tesco password,
Tesco website and app back up after hack attempt – BBC News
On the technical front it seems that the incident response plan has functioned correctly. However it seems that customer communications and service is not a key part of Tesco’s incident response plan as illustrated by the many issues the customers now face.
Make sure your written incident response plan has not only your technical response but steps to treat your clients and customers correctly. A good channel of communications is probably Step 1.
Incident response plans we have written do include Step 1.
Clive Catton MSc (Cyber Security) – by-line and other articles
