TalkTalk's security flaw could expose millions of customer details

London-based telecommunicationscompany TalkTalk was first contacted about the bug in March 2016 but considered it low-enough risk to leave un-patched.