Security News > 2015 > October > TalkTalk attack: 'No legal obligation to encrypt customer bank details', says chief (The Register)