Digital ad industry accused of huge data breach

HTTP/1.1 302 Found Server: EMX Date: Wed, 16 Jun 2021 18:07:13 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 228 Connection: keep-alive Location: https://www.bbc.com/news/technology-57232253 Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=3600 HTTP/1.1 200 OK Connection: keep-alive Content-Length: 238017 Content-Type: text/html X-Msig: 47ac616428bc61f79ca039a62310c962 moz-cache-status: HIT req-svc-chain: FASTLY,GTM,MOZART,BELFRAGE belfrage-cache-status: MISS bid: bruce brequestid: 77e97d07f78945d9a7c3c66051c970bf bsig: c4380b798a3d3cbd9441968a3dd8fe72 cache-control: public, stale-if-error=90, stale-while-revalidate=30, max-age=30 content-return-type: STY content-security-policy-report-only: default-src tpc.googlesyndication.com *.safeframe.googlesyndication.com; script-src 'strict-dynamic' 'nonce-oRoKO9mJd75FPa5VAGTyS8mobOpBsHEQ7VME4JOcrJY0E+fH0f' 'self' 'report-sample' 'unsafe-inline' assets.wearehearken.com assets.wearehearken.eu cdn.syndication.twimg.com connect.facebook.net emp.bbci.co.uk ems.wearehearken.com ems.wearehearken.eu modules.wearehearken.com modules.wearehearken.eu mybbc-analytics.files.bbci.co.uk nav.files.bbci.co.uk news.files.bbci.co.uk platform.twitter.com public.flourish.studio static.bbc.co.uk static.bbci.co.uk static.chartbeat.com static2.chartbeat.com www.bbc.co.uk www.instagram.com www.ons.gov.uk gn-web-assets.api.bbc.com www.google-analytics.com adservice.google.co.uk adservice.google.com *.g.doubleclick.net www.googletagservices.com cdn.ampproject.org tpc.googlesyndication.com *.adsafeprotected.com *.effectivemeasure.net *.3lift.com cdn.permutive.com sb.scorecardresearch.com bbc.gscontxt.net static.files.bbci.co.uk; img-src 'self' c.files.bbci.co.uk data: https://a1.api.bbc.co.uk i.ytimg.com ichef.bbci.co.uk logws1363.ati-host.net news.bbcimg.co.uk news.files.bbci.co.uk newsimg.bbc.co.uk pbs.twimg.com ping.chartbeat.net platform.twitter.com r.bbci.co.uk sb.scorecardresearch.com syndication.twitter.com ton.twimg.com www.google-analytics.com *.doubleclick.net *.googlesyndication.com www.google.com *.adsafeprotected.com csi.gstatic.com *.imrworldwide.com collector.effectivemeasure.net eb2.3lift.com sb.scorecardresearch.com px.moatads.com static.files.bbci.co.uk; font-src gel.files.bbci.co.uk static.files.bbci.co.uk static.bbci.co.uk news.files.bbci.co.uk ws-downloads.files.bbci.co.uk; style-src cdn.riddle.com flo.uri.sh news.files.bbci.co.uk platform.twitter.com static.bbc.co.uk static.bbci.co.uk ton.twimg.com www.riddle.com 'unsafe-inline'; frame-src 'self' bbc001.carto.com bbc003.carto.com bbc-maps.carto.com cdn.riddle.com chartbeat.com emp.bbc.co.uk emp.bbc.com flo.uri.sh m.facebook.com news.files.bbci.co.uk personaltaxcalculator2.deloittecloud.co.uk platform.twitter.com public.flourish.studio static2.chartbeat.com syndication.twitter.com web.facebook.com www.bbc.co.uk www.facebook.com www.instagram.com www.ons.gov.uk www.riddle.com www.youtube.com *.googlesyndication.com *.doubleclick.net edigitalsurvey.com eb2.3lift.com cdn-gl.imrworldwide.com *.teads.tv; object-src 'none'; worker-src 'self' blob:; manifest-src static.files.bbci.co.uk; connect-src 'self' cookie-oven.api.bbc.co.uk cookie-oven.api.bbc.com ems.wearehearken.com ems.wearehearken.eu https://a1.api.bbc.co.uk locator-service.api.bbci.co.uk logws1363.ati-host.net modules.wearehearken.com modules.wearehearken.eu mybbc-analytics.files.bbci.co.uk news.files.bbci.co.uk static.files.bbci.co.uk platform.twitter.com search.api.bbci.co.uk search.api.bbci.com r.bbci.co.uk www.bbc.co.uk www.bbc.com www.google-analytics.com idcta.api.bbc.com *.googlesyndication.com *.doubleclick.net csi.gstatic.com adservice.google.com fundingchoicesmessages.google.com gn-flagpoles.api.bbci.co.uk gn-flagpoles.test.api.bbci.co.uk *.effectivemeasure.net api.permutive.com *.prmutv.co experience.tinypass.com secure-dcr-cert.imrworldwide.com *.teads.tv pixel.adsafeprotected.com https://europe-west1-bbc-otg-traf-mgr-bq-prod-4591.cloudfunctions.net activity.api.bbc.co.uk session.bbc.com; child-src blob:; base-uri 'none'; form-action 'self' platform.twitter.com syndication.twitter.com; frame-ancestors 'none'; upgrade-insecure-requests; feature-policy: accelerometer 'none'; autoplay 'none'; camera 'none'; document-domain 'self' https://emp.bbc.com https://emp.bbc.co.uk http://emp.bbc.com http://emp.bbc.co.uk; encrypted-media 'none'; fullscreen 'self'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; midi 'none'; payment 'none'; picture-in-picture 'self' https://emp.bbc.com https://emp.bbc.co.uk http://emp.bbc.com http://emp.bbc.co.uk; screen-wake-lock 'none'; sync-xhr 'none'; usb 'none'; xr-spatial-tracking 'none' nel: {"report_to":"default","max_age":2592000,"include_subdomains":true,"failure_fraction":0.05} referrer-policy: strict-origin-when-cross-origin via: 1.1 BBC-GTM, 1.1 Belfrage, 1.1 varnish x-content-type-options: nosniff x-frame-options: DENY x-xss-protection: 1; mode=block X-Mrid: n1 report-to: {"group":"default","max_age":2592000,"endpoints":[{"url":"https://europe-west1-bbc-otg-traf-mgr-bq-prod-4591.cloudfunctions.net/report-endpoint","priority":1}],"include_subdomains":true} X-BBC-Edge-Cache-Status: MISS X-BBC-Origin-Response-Status: 200 Server: BBC-GTM Accept-Ranges: bytes Date: Wed, 16 Jun 2021 18:01:11 GMT Age: 0 X-LB-NoCache: true X-Fastly-Cache-Status: MISS-CLUSTER X-Served-By: cache-hhn4031-HHN X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1623866471.219273,VS0,VE85 Vary: X-BBC-Edge-Scheme,Accept-Encoding