TalkTalk spent the weekend in full PR mode claiming the attack was the work of cyber jihadi's[0] and suggesting huge resources were used to target and overcome their defenses (i.e. the "no-one could have withstood this sort of attack" defense) and then switched to a defense of "no legal requirement to encrypt customer financial data" when people got upset about their bank details being pilfered[1] and reports of bank accounts being emptied started to emerge.

Now we find out the likely candidate is a spotty teenager. I wonder how TalkTalk plan on trashing this kid now.

[0] http://www.standard.co.uk/news/crime/talktalk-hack-by-cyber-... plus many others [1] e.g. http://www.theregister.co.uk/2015/10/26/talktalk_crypto_obli...