|
Title: Hackers charged for stealing 41 million credit card numbers Post by: KrisTeason on August 05, 2008, 08:17:08 PM Hackers strike again!
Quote BOSTON - Eleven people, including a U.S. Secret Service informant, have been charged in connection with the hacking of nine major retailers and the theft and sale of more than 41 million credit and debit card numbers, the Justice Department announced Tuesday. Full Story Below http://news.yahoo.com/s/ap/20080805/ap_on_bi_ge/retailer_fraud_indictment (http://news.yahoo.com/s/ap/20080805/ap_on_bi_ge/retailer_fraud_indictment) Title: Re: Hackers charged for stealing 41 million credit card numbers Post by: RobMongoose on August 06, 2008, 07:50:40 AM Damn those hackers!
And of course these businesses are in no way blamable for this having left their customers confidential details floating around on insecure networks... Title: Re: Hackers charged for stealing 41 million credit card numbers Post by: Kev on August 06, 2008, 06:31:02 PM It never ceases to amaze me about how sloppy companies can be with data. This was not an impressive hack from what I have been able to determine. In some cases the wireless was totally open and not even protected with lousy wep! They just drove around business areas scanning for open access points networked with vulnerable computers! We need to be able to trust the security of our data and believe that those we trust will make at least a small effort in protecting that. I am not sure who is the worse criminal in this story.
Title: Re: Hackers charged for stealing 41 million credit card numbers Post by: RobMongoose on August 06, 2008, 07:12:47 PM Hasn't some sort of legislation been brought in since this happened specifying a minimum level of security for companies storing financial details? I'm sure I heard talk of that sort of thing. Still won't stop security breaches through general ineptitude, but should make things a little better.
Title: Re: Hackers charged for stealing 41 million credit card numbers Post by: dalepearson on August 07, 2008, 04:39:12 AM There are a few things companies are supposed to be doing. Obviously there is the data protection act that mean companies should take due care to secure personal information. We also have PCI:DSS (Payment Card Industry : Data Security Standard) that specifically looks at ensuring a secure environment for the storage and processing of credit card data.
As we know there is no easy step when it comes to security, its good we have these requirements, but security is often seen as a like as opposed to a need. Organisations are sadly very reactive when it comes to security, and will only spend when / if an issue occurs. Proactive security is the key, using a risk based approach to get the balance right. Keeps us in a job anyway :D
Powered by SMF 1.1.7 |
SMF © 2006-2008, Simple Machines LLC
Joomla Bridge by JoomlaHacks.com |