Sky cyber-security fears leads to password reset for customers

Python 2

Customers of Sky broadband packages are being encouraged to reset and change their passwords, reports reveal.

The prompts come within a broader security crackdown, as the media giant bids to mitigate risk against cyber-criminals. A number of customers have now received emails holding links to enable the password reset to take place.

“We take the security of your data and information extremely seriously,” the email reads.

“To help keep your account safe we have reset the password for your Sky account,” it continues.

Replying to posts on social media, the company reassured customers that their emails and their advisory messages are authentic, and said that the action is being taken as a “security measure.”

Sky’s response was made as many customers feared the emails may have been part of a phishing attempt.

Other responses to the post queried whether their TV provider was taking the measures as part of a reaction to a potential data breach. Speaking to Metro.co.uk, the said that a data breach was not at the root of the communications.

“‘To help keep customer’s accounts safe we occasionally reset the password for Sky accounts. Customers can reset their password online at Sky.com,’ a spokesperson for Sky told Metro.

As reported by info security, Joseph Carson, chief security scientist & advisory CISO at Thycotic,said:

“The latest news regarding password resets occurring for email accounts with sky.com, as so-called ‘precautionary measures’ that have been taken, indicates that the incident is ongoing and possibly the root cause is still unknown.

“If indeed this was a credential stuffing cyber-attack, then there would be an indicator of a high number of failed log-in attempts, hopefully resulting from some users following best practices by not using the same password across multiple accounts. This is what credential stuffing is trying to abuse using an automated process,” Mr Carson added.


Join our free-to-attend digital event, Last Thursday in Privacy, addressing data protection, privacy and security challenges including working from home, COVID-19, global regulations and more. Visit https://digital.privsec.info/.

We have been awarded the number 1 GDPR Blog in 2019 by Feedspot.