Plusnet will give your personal details to ACS Law with not informing you!!

[#1]

Quote from: MarquisBarking

Am I right in my understanding: 1.  PlusNet's standard response to an NPO order is to concede before the hearing and not even send a legal representative, although other ISPs both contest and attend?

Yes, except, some ISP say they will contest and are never then asked to attend, so never attend.

Quote

2.  PlusNet do not ask for notifications of prosecutions and actions which result, even those these might form a defence against providing data in the future and are routinely required by other ISPs forced to comply with orders?

Plusnet have starting doing this, and indeed maybe (from my limited knowledge) the first and only ISP to do this, there is a draft of one court order where this was missed out, but Plusnet have assured us it was fixed.

Quote

3.  PlusNet have been sending this data in unecrypted form even though the terms of the order requires/advises encryption?

In essence, yes.

Quote

4.  PlusNet have not said sorry?

Not sure.

[#2]

Fletch - does 'no longer co-operating with ACS:Law' mean that PN will be sending proper legal representation in opposition of the request for a court order on 4th October?

[#3]

Quote from: jelv

Quote from: MarquisBarking 4.  PlusNet have not said sorry? 4. Jury is out on that one. They have grudgingly admitted they did it, but I wouldn't call it a fullsome apology! Wrong they have come back with a far more reasonable response.

[#4]

Quote from: Fletch

We are extremely angry with ACS Law for allowing this to happen.

I can but imagine, I think many many people are hopping mad.
The main question outstanding for me is
Will Plusnet (or your representative) be at the 4th October hearing and if the judge allows it, will that person be there in a legal capacity to represent Plusnet?

[#5]

Quote from: julesandsand

Fletch - does 'no longer co-operating with ACS:Law' mean that PN will be sending proper legal representation in opposition of the request for a court order on 4th October?

ACS Law are nothing to do with the hearing on 4th October.

[#6]

Quote from: Fletch

All; Firstly, we would like to apologise again to customers affected by the leak of data from ACS Law.  We can confirm that we did send unencrypted data to ACS Law. However, this was not the cause of the leak. At a later date, due to a cyber-attack on the systems of the law firm, data that it held was leaked. We are extremely angry with ACS Law for allowing this to happen. We would like to re-iterate that we have contacted all the affected customers via email.  However, if you haven’t received an email from us and you have previously received a letter from ACS Law in relation to Plusnet, then please raise a ticket via our Help Assistant . As a result of the incident at ACS Law, Plusnet will be providing all affected customers with an Identity Protection Service, including internet security software, free of charge for the next 12 months.  We will contact customers directly regarding this over the coming days. We are investigating how we came to be sending unencrypted data as we have robust systems for managing data. We have already ensured that this type of incident will not happen again, launched an internal enquiry and we have alerted the Information Commissioner's Office (ICO). We will work with the ICO to clarify our position. As we stated yesterday we are no longer co-operating with ACS Law over the provision of information and can confirm that we are reviewing our position in relation to these requests in general. Due to serious concerns about the integrity of the process that is being used by rights holders, we will resist efforts to share more customer details with them and those acting on their behalf until we can be sure that alleged copyright infringements have some basis and customers are treated fairly. Thanks, Fletch

What on earth is free identitiy protection software going to do for me now??? I hope you are including a 12 month subscription waive???????

[#7]

Quote from: jelv

Quote from: julesandsand Fletch - does 'no longer co-operating with ACS:Law' mean that PN will be sending proper legal representation in opposition of the request for a court order on 4th October? ACS Law are nothing to do with the hearing on 4th October.

Is PN something to do with the hearing?

[#8]

I suspect it's actually an Identity Protection *service*, such as one from Equifax.
IMO, that's actually a smart idea and I'm surprised no-one here actually thought of requesting it.
B.

[#9]

Quote from: foxtrck

What on earth is free identitiy protection software going to do for me now??? I hope you are including a 12 month subscription waive???????

Service, not software.  Its basically someone like Equifax monitoring your credit history very closely and alerting you to anything that looks dodge, I'm sure theres more to it than that, but in essence, thats it.

[#10]

Quote from: julesandsand

Is PN something to do with the hearing?

Yes, at that hearing they are being requested to disclose details of customers to a different law firm, but for basically the same reasons.

[#11]

Fletch, fletch, fletch, I wish you hadn't said that as I think you have been working in our bests interests in the past, however I really cannot let you say this  "However, this was not the cause of the leak. At a later date, due to a cyber-attack on the systems of the law firm, data that it held was leaked." you must know by know that no hacking was involved, just incompetent system administration procedures which allowed a backup copy of the email database to be available on the Acs-law webpage.
Point 2. Again I ask the question, with what is known now, is plusnet going to "work" with the likes of Gallant McMillan and supply names and addresses.
Again fletch there is nothing personal in this post and I appreciate everything you have done behind the scenes. No other COO has spoken to their customers like you have. It is just a shame your bosses are BT

[#12]

Hmmm... seems Plusnet are a little more entangled in this than they care to admit.
The ASC:Law website is currently (at time of writing) unavailable, but a little digging turns up the following info, which suggests that Plusnet are/were supplying internet services to ASC:Law...
$ host acs-law.org.uk
;; connection timed out; no servers could be reached
$ nslookup acs-law.org.uk
;; Got SERVFAIL reply from 212.159.13.49, trying next server
;; Got SERVFAIL reply from 212.159.13.50, trying next server
Server:        212.159.13.49
Address:        212.159.13.49#53
** server can't find acs-law.org.uk: NXDOMAIN
$ host 212.159.13.49
49.13.159.212.in-addr.arpa domain name pointer cdns01.plus.net.
$ whois 212.159.13.49
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf
% Note: This output has been filtered.
%      To receive output for a database update, use the "-B" flag.
% Information related to '212.159.13.0 - 212.159.13.255'
inetnum:      212.159.13.0 - 212.159.13.255
netname:      PLUSNET-VISP-SERVERS
descr:        Virtual ISP Portal servers
descr:        PlusNet Technologies Ltd
country:      GB
admin-c:      PLUS1-RIPE
tech-c:      PNET2-RIPE
status:      ASSIGNED PA
mnt-by:      MAINT-AS6871
source:      RIPE # Filtered
[rest of whois data snipped for brevity]
Would anyone from Plusnet care to comment?

[#13]

Quote from: Barry

I suspect it's actually an Identity Protection *service*, such as one from Equifax. IMO, that's actually a smart idea

Agreed

Quote from: Barry

and I'm surprised no-one here actually thought of requesting it.

Ditto

[#14]

Quote from: Emdee

Hmmm... seems Plusnet are a little more entangled in this than they care to admit.

Er, no, thats Plusnets servers, telling you they can't find ACS...

[#15]

Emdee - that's just Plusnet's DNS servers unable to find the records for acs-law.org.uk, which I assume have been temporarily removed by the registrar.
PN have never hosted their website..
B.