Hacker News Reader

Their official statement says

> we took immediate steps to respond to and manage the incident and engaged leading forensic experts to investigate the issue. We also notified the National Cyber Security Centre and the ICO. We have closed off this unauthorised access.

Maybe the relevant supervising authority didn't find it important to notify those 9 million customers.

View on HN

> Maybe the relevant supervising authority didn't find it important to notify those 9 million customers.

Which is a problem right? Now it emerges what has been breached. Including credit card data. Surely the prudent thing would have been to warn all their customers immediately to allow them to be on the lookout for malicious use of their data (phishing, etc.) and not wait until they have concluded their investigation.

Reply on news.ycombinator.com