While the financial world chirps about a financial recession, Davidson Companies --an American financial player-- has been hacked, and 226.000 personal records are stolen by an unknown attacker. They said that the hackers used very sophisticated techniques to access the database. But the biggest issue here is that their system just had a security checkup, and no flaws or security issues where found. "In September, the company hired an outside firm to test to see if it could hack into the company's computer system, he said. The firm wasn't able to." I'm interested who pentested their system, obvious it wasn't enough. It also raises some more questions: Why do they store 226.000 personal records un-encrypted? why do they store it at all? why don't they reference records with offline or monitored databases? Actually, this is hardly big news anymore. The company recently became aware of the intrusion and immediately took its public Internet site offline. The company has contacted law enforcement and its regulatory authorities, notified the three credit reporting bureaus, and retained an information technology security and forensic firm to review the incident and assist the company in its response.Another day in security why worry about it, they probably thought they were hackersafe
226.000 Database Records Stolen From Davidson Companies.
By secgeeks - Posted on February 5th, 2008
66
vote
http://www.secgeeks.com/trackback/1426
















