A sophisticated and determined attack.....
...is what it'll say in the press removing release to make it look like Tesco are a victim.
I've worked in security in a number of large retailers (including some with a finance/bank arm), most staff including customer service staff, have far too much access to customer data. I've had to handle a couple of cases where customers have had money removed from bank accounts and most of the time its CS staff who capture the data and then sell it on, if you're on minimum wage, selling a couple of hundred customer account details might be worth the risk. However if it only affects a few customer the banks have tended to refund the money, give a little financial compensation and hush the whole thing up.
Now add to the fact that in August Tesco announced they were closing some offices in Edinburgh moving the roles to their Edinburgh HQ building and moving 250 customer support roles from Edinburgh to Glasgow and Newcastle.
So you now have a number large number of staff who may have been told to relocate or be put 'at risk'.
Very likely to be inside job.
Biting the hand that feeds IT
