Hi @CanWeFixIt,
Basil is not available tonight so I am stepping to help and rectify this.
The privacy and security of all our customers is extremely important to us. Our Cyber Defence and Response Centre provides around-the-clock, event monitoring, threat protection and intelligence, to help protect our customer’s data and our services against online security threats.
We ensure that your information can only be seen and used by staff who need it to do their jobs. Keep in mind that any transactions or information obtained through this channel without multi factor authentication is low risk, such as the plan you are on, or general troubleshooting processes.
The reason we ask for the above information, is so we can properly identify customers to ensure no information is shared with anyone that is not authorised.
I will have a TPG representative to call the contact mobile number on the account to provide technical assistance. Please confirm your best contact time tomorrow.
Regards,
It seems my nightmare has now become worse, sounds like TPG has not learnt from Medibank or Optus Hack.
The information you asked for has a lot of Personally identifiable information (PII). I rather not provide you this information on this TPG community forum as I do not know how secure it is.
It is strange to get support from TPG in this forum, I need to provide the following information - I thought by providing an TPG Customer ID should be enough.
First name: xxxx Last name: xxxx Phone number: xxxx Username / email address: xxxx Are you the account holder?: Yes/No Date of birth: xxx
Why doesn't TPG just use the main account web page to authenticate us into this forum? That way, you do not need to ask these information to identify who I am. The main www.tpg.com.au webpage has multi-factor authentication - this community forum does not. This forum to me, has increase the attack surface on TPG and this scares me.
I know you are just following the process, but I rather have you escalate this through the management team. As I am very concerned for the information security for those who have already provide their PII just to get support.
I am just concern that it will become another Optus hack in the making and that TPG has not learnt anything from the others.
Should I be looking into churning to another internet service provider??
Please let us know if you got any feedback from the management team, as I am eager to hear what actions they plan to take.
