Plusnet will give your personal details to ACS Law with not informing you!!

[#1]

I'd guess its because Plusnet can obtain a  year licence to distribute to customers at next to no cost and as such it was just something to throw in with the identity protection.  Otherwise, I can't see any real point unless they want to extend free anti-virus to all their customers and there by perhaps cut down on bot generated traffic... buts thats a discussion for another thread.

[#2]

Just got a phone call from Plusnet telling me my details were leaked from ACS:Law.
Just checked my account and saw the following:
We’re emailing to you to provide an update regarding last week’s disclosure of some of our customers’ personal information from a third party law firm’s web servers.
Whilst you should already have received an email about this, there is the possibility that you haven’t yet read it, or it may have been sent to an address that you no longer use.
You can find detailed background information about this incident on our website. Please take a moment to read through this information if you are not yet familiar with what has happened.
http://www.plus.net/support/acslaw.shtml
We are now able to confirm that your information was included in the leaked data. The information that has been leaked contains your full name, postal address and the details of the copyrighted works that you have allegedly shared/uploaded.
As I’m sure you would expect we’ve spent a lot of time investigating the circumstances surrounding the inadvertent release of your personal information. As well as emailing you, we have taken further action as described below.
Okay, great. Thanks very much.
So how do I find out what I apparently downloaded?
Should I even bother worrying?

[#3]

Take a look here http://www.slyck.com/forums/viewtopic.php?f=66&t=44092&start=11000 and read back a good few pages, everything you ever wanted to know and good deal you never wanted to know is all there for you to see.

[#4]

No need to worry or lose sleep over it but at the same time don't just ignore it.
If your credit card details are in the wild take action now and phone credit card company.
Then over the next few months/years keep an eye open for identity theft.
If you work with children or other sensative areas and your employer seen you have been accussed of downloading porn then you may have something to worry about and if they sack you seek legal advice.

[#5]

I found the leaked list online, but for the plusnet file it just seemed to show IP's and all the other info was blanked out.
Thanks for the link fourfourdevon but the thread is HUGE.
Is there a post/summary somewhere in there that you can give me a page number for or something?
I just want to find out what I supposedly downloaded and when.
Thanks.

[#6]

I don't know what you saw, but if Plusnet have contacted you, then for certain your name, address and the file you are accused of downloading are available to the public.  I can't link directly to where you can find it, ts against the rules here on this forum, but a bit of googling or looking through that thread on Slyck especially the last week of stuff will tell you everything you need to know.

[#7]

Remember Plusnet broke the conditions of a court order.
They won't quite put it like that and put the blame at ACS laws door but the fact is they did not follow the court order.

[#8]

Quote from: Toolbox

If your credit card details are in the wild take action now and phone credit card company.

@hedgehog90
Your credit card details will only be in the wild if you have paid compensation to ACS:Law. As you don't know what you are alleged to have uploaded, it's safe to assume that they haven't even asked you for money yet.
Plusnet haven't passed your credit card details over, not did they suggest what you had uploaded. ACS:Law provided Plusnet with a list of IP addresses, the times they were being used & the titles of the intellectual property that they alleged was being uploaded. Plusnet, under the instructions of a court order they hadn't objected to (which was the main complaint against Plusnet), added the name & address associated with that IP address at the time specified. They then returned that information to ACS:Law via the BT legal dept. That information wasn't sent in an encrypted format, as it should have been.
Although the data reached ACS:Law without being intercepted & published, a recent data security problem at ACS:Law led to that information becoming public.
Most people have been alleged to have made some music (of dubious musical quality) available for distribution. Others are alleged to have been uploading porn. Some people have suggested that the slur on their musical taste is more embarrassing than any suggestion that they have been uploading porn or distributing copyright material, although that might have been tongue in cheek. 

[#9]

PlusNet should (must if asked) give you ALL the information they sent to ACS:Law, including the data originally sent to them identifying the "work" in question, date.time, IP address etc..
Technically they could charge you (£10?) to do so as it's a DPA Subject Access Request, but if I was them I wouldn't dare! 

[#10]

Quote from: Simon

@hedgehog90 Your credit card details will only be in the wild if you have paid compensation to ACS:Law. As you don't know what you are alleged to have uploaded, it's safe to assume that they haven't even asked you for money yet.

Yeah, I should have said that sorry if I made you worry more than you need to.

[#11]

Guys let me say that I am sooo happy that I left PlusNet some time ago and went with a (so far) decent company, which values its customers more than some unscrupulous lawyers who try to make money out of emotional and social blackmail.
Truth is that I do not use bittorrnet, or peer-2-peer, but on a point of principle I do sympathise with those of you who suddenly discover that you have been betrayed by a company who was meant to honour the first principle of staying in business:  serve their customers!
It seems that PlusNet (or should I say BT) have aligned their interests not with those who pay them money and keep them in business, but with the courts, an idiotic law that bent politicians voted in (according to Panorama £5-7k would buy you most of them), the media industry who continue to increase their profits even through this credit crunch and some blackmailing law firm that truly deserves all the backlash they got and much more.
PlusNet had many ways, should they wished to look into it, of doing the right thing both from a moral and a business perspective.  They could charge silly money for providing the information, they could have changed your status from 'subscribers' to 'communications providers' (there's a simple loop hole there in The Communications Act 2003 for those who know how to interpret it, which would make you exempt from all this legislation), change your IP address every now and then and somehow loose their records if they had to, obfuscate and encrypt all this information and find any-way possible to make difficult for your *personal and private* details to become accessible by anyone who *you* did not want to share with, etc.  The least they could do would be to encrypt all the information they shared with the idiotic sysadmins who were hacked, but they seem incapable to even do that!
What I'm saying here is that these guys and their bosses are still in business and can earn their annual bonus (yep, I bet the Board of Directors enjoy a fat bonus each year) only because people like you empower them with your implicit trust that they will look after your interests.  Well, they did not!  They betrayed your interests and somehow looked after what I see as a twisted understanding of their interests too.  Given their behaviour I can only see two possible avenues that you can can extract your just reward for their abuse of trust:

• Use their own medicine - find if it is possible to use some 'no win - no fee' lawyers and sue all involved (PlusNet, BT - if you can - and AC Law) and anyone legally responsible for allowing by their intent or negligence this leak to take place.


• Immediately leave PlusNet and never join any company that is associated with PlusNet, or BT, or any of their successors (it goes without saying that you should not join Sky!)

I'm really sorry that this has been allowed to take place by a company that I was sorry to leave back then, but you should not let it carry on or even worse allow it to repeat itself;  because if you do not stand up and do something about it, rest assured it will happen again.

[#12]

Quote from: speechless

I received a call this morning from plusnet saying that I would be offered through the site a virus checker and something about an identity protection system. I said to the chap that I would be leaving plusnet, so although an identity protection service is rather essential at present I didnt think I'd be able to accept their offer. However, I'd just like to ask if this is to be regarded as compensation for all past and present customers who's details were passed on unencrypted and in breach of the DPA, or is this some sort of sweetener for affected customers to try to make them stay and only valid for the lesser of 12 months or the duration of their connection to plusnet?

Hi there,
The Identity Protection service is being offered to all customers affected, whether they are still Plusnet customers are not, for a period of 12 months. There's no condition attached.
The Anti-Virus can only be added for the duration of your account however, as the licenses for the Anti-Virus software are tied to your Plusnet account.

[#13]

Quote from: hedgehog90

So how do I find out what I apparently downloaded? Should I even bother worrying?

Assuming you haven't had any contact with ACS:Law then you don't need to worry about financial data being available. The info we passed will have been your name and address, though the leaked file will also contain your IP address and the file you allegedly shared.
If you want the details, raise a ticket from the link in the emails and we'll add it on there.

[#14]

Quote from: HPsauce

PlusNet should (must if asked) give you ALL the information they sent to ACS:Law, including the data originally sent to them identifying the "work" in question, date.time, IP address etc.. Technically they could charge you (£10?) to do so as it's a DPA Subject Access Request, but if I was them I wouldn't dare!

We will give the information if customers raise a ticket, for free obviously.
The £10 charge only comes into play if you want ALL the info we hold on you.

[#15]

only because £10 is the maximum you are legally entitled to charge.