Size of TalkTalk hack scaled down while its management failings are amplified
Over the weekend the company's management stated that the cyber-attack had been 'smaller' than alleged, and had not penetrated its core systems. The company has faced a barrage of criticism ranging from allegations of a cover-up, to negligence and a complete lack of care for their customers. Of these, the most damaging allegations centre around the cover-up allegations, which will leave the company open to rigourous investigation. It now appears that TalkTalk was in fact hacked a few months ago and that either the company took no notice of customer complaints, or quite simply remained oblivious to the fact. While the company now facesa significant compensation bill; but the greater damage is likely to come from customer defection. Notions that the hack was carried out by a Jihadist group are currently being dismissed.

Get the free Morning Headlines email for news from our reporters across the world Sign up to our free Morning Headlines email Please enter a valid email address Please enter a valid email address SIGN UP I would like to be emailed about offers, events and updates from The Independent. Read our privacy notice Thanks for signing up to the

Morning Headlines email {{ #verifyErrors }} {{ message }} {{ /verifyErrors }} {{ ^verifyErrors }} Something went wrong. Please try again later {{ /verifyErrors }}

TalkTalk is facing accusations of a "cover-up" over one of the largest cyber hacks in British history, after claims emerged from customers who say they were targeted by scams almost a week before the company went public about the attack.

On Thursday, the company announced that millions of customers had their credit card and bank details stolen, during what it said was a "significant and sustained cyber attack".

However, as early as Friday the previous week, customers suffered attacks on their home computers as well as scam calls by thieves who knew their names and account details, The Telegraph reports.

Keith Vaz, chairman of the cross-party home affairs select committee, alleged evidence was beginning to emerge that TalkTalk had covered up the true scale of the "alarming and unacceptable" crime.

Recommended Read more Police launch investigation into cyberattack on TalkTalk website

The company released a statement denying a cover up, saying the accusation was "deeply unfair".

The Guardian features an interview with a man who said he nearly fell victim to a "very convincing scam" on Wednesday morning – more than 24 hours before TalkTalk's announcement – in which perpetrators hijacked his internet connection and then telephoned him pretending to be from TalkTalk support.

"They had all the details you would expect TalkTalk to have at hand, including name, address, phone number and TalkTalk account number," he said.

This suggests customers were targeted by criminals days before the telecoms company admitted the data of up to four million of its subscribers was stolen.

TalkTalk has since received a ransom demand from someone claiming to be responsible for the cyber attack.

A message was posted online to the Pastebin website claiming the attack was the work of a Russian-based team of Islamic extremists.

TalkTalk has been heavily criticised after leaving customers' data unencrypted, meaning the information will now be easy for anyone who finds it to see.

The attack is the third to hit the company this year.

Encryption is one of the most basic security methods recommended to companies, since it means that only those with a key can actually see the documents, so stealing them can be useless.

Each attack saw customers' personal data breached and then apparently sold on to criminals, who used the easy access to attempt to scam those on the list.

Responding to The Telegraph's report, a TalkTalk spokesperson said: “We haven’t been covering up anything.

“We went public with this within 36 hours. It’s not easy to go much quicker.

“We cannot be accused of trying to hide the scale of this. That is deeply unfair.”

The Metropolitan Police Cyber Crime Unit is investigating the allegation of data theft, which was reported on Wednesday, 21 October.

Detective Superintendent, Jayne Snellgrove of the Cyber Crime Unit said: "TalkTalk have done everything right in bringing this matter to our attention as soon as possible.

"The Met has one of the largest cyber crime and fraud teams in Europe, with up to 500 specialist officers dedicated to tackling this sort of offence.

"Our success relies on businesses being open with us and each other about the threats they encounter.

"This case is just one example of the new generation of criminality my team are dedicated to tackling. We continue to lead on this investigation but are working with the National Crime Agency (NCA).

"Operation Falcon sees a more focused and joined-up approach by the MPS, the business industry and other law enforcement agencies to ensure that we quickly identify the issue - in this case alleged data fraud - and immediately set about working to protect the public, designing out the crime and arresting the culprits."​

Following the hack, the company said any customers who notice unusual activity on their accounts should contact their bank and Action Fraud, the UK's national fraud and internet crime reporting centre.

They have also been urged to change their TalkTalk account passwords and the passwords of any other accounts which use the same passwords.

Have you been affected by the TalkTalk cyber attack? Email us at talktalk@independent.co.uk or tweet us @Independent to tell us your story