Image
 
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 28 guests and 1 member online
EH-Net Donations

Enter Amount:
$

Google Ads
EH-Net News Feeds
Latest Additions
Book Recommendations





 
Advertisement

You are here: Home arrow Forum arrow Featuresarrow /rootarrow How to Steal 80,000 Identities in One Day
Ethical Hacker Community Forums
December 02, 2008, 05:42:42 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: ChicagoCon 2-Day Ethical Hacking Conference with MS Blue Hats Oct 31 - Nov 1. Tickets Only $100! www.chicagocon.com/content/view/103/51/
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: How to Steal 80,000 Identities in One Day  (Read 3097 times)
0 Members and 1 Guest are viewing this topic.
don
Editor-In-Chief
Administrator
Hero Member
*****
Offline Offline

Posts: 2380


Editor-In-Chief


View Profile WWW
« on: February 27, 2007, 11:08:07 AM »

Very interesting read. This could be a great way to test your disaster recovery plan with or without the knowledge of your CEO... although I don't recommend the latter.

Quote
Author’s Note: How do you get the attention of the executives at your company if you feel the security systems are lacking? Fake a news article on a huge break in, and place it on the CEO’s desk. We were asked to create such a story, and wanted to share it with you as a case study as to just how someone could Steal 80,000 Identities in One Day.

April 1st started like any other for Acme Medical Services. Patients were calling in to cancel appointments due to scheduling conflicts, staff members were alerting their managers that they couldn't come into work because they were sick, and the IT department was busy with their normal morning routine. From the perspective of Acme, all appeared normal.

However, by April 3rd, Acme's situation would be anything but normal. Administrative staff would be busy informing patients their personal data was stolen, managers would be calling their health care professionals to tell them to stay home because the offices were closed until further notice, and the IT department would be busy trying to figure out just how they had lost control of the personal information of over 80,000 of their clients. Life at Acme would be anything but normal.

For full story:
http://www.informit.com/guides/content.asp?g=security&seqNum=243&rl=1

Don
Logged

CISSP, MCSE, CEH, Security+ SME
oleDB
Full Member
***
Offline Offline

Posts: 231



View Profile WWW
« Reply #1 on: February 27, 2007, 12:56:08 PM »

I'm pretty confident most bureaucratic companies would spend their time trying to lynch what individual/team wrote the story instead of actually "getting it"

We attempted something similar to that at my company and the report and story were buried never to see the light of day. Sad
Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.7 | SMF © 2006-2008, Simple Machines LLC
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.051 seconds with 24 queries.
 
Sponsors

cwnp_moto__120x90.gif

Polls
During the most recent election, I:
 
Support EH-Net


Support EH-Net by
Buying all of your
Amazon items using
the search bar above.

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!
Recent Forum Topics
Vote For EH-Net

progenic.com
Click here to Vote!

Sadikhov.com
Top IT Cert Sites

binarica.com
Binarica Logo

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2008 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.