ISR News: Sprint Employee Stole Client Data
Excerpts From the Washington Post
“It appears this employee may have provided customer information to a third party in violation of Sprint policy and state law. We have terminated this employee. The information that may have been compromised includes your name, address, wireless phone number, Sprint account number, the answer to your security question, and the name of the authorized point of contact on your account.”
ISR News: 2009 - Year of the Insider Threat
Excerpt From BankInfoSecurity.com
The increased number of employers handing out pink slips doesn’t help quell the threat, with a record number of people on the unemployment lines and others at work worried about their own positions. “We’re going to see some insider events where insiders are tempted enough by money to enable these compromises to take place from outsiders, allowing access to payment data and account information,” says Mike Urban, Senior Director of Fraud Solutions at Fair Isaac, predicts,
ISR News: WorldPay Facing Class Action
Excerpts From SecurityFocus.com’s Robert Lemos
RBS WorldPay Facing Class Action Lawsuit Over Breach (February 6, 2009) Law firms in Pennsylvania, Georgia and Washington DC have filed a class action lawsuit against payment processor RBS WorldPay.
ISR News: World Power Hubs Are Bugged
Excerpts From The Register’s Dan Goodin
“An unauthenticated attacker may be able to gain access with the privileges of the e-terrahabitat account or an administrator account and execute arbitrary commands, or cause a vulnerable system to crash,” CERT’s advisory states. Users should apply the patch immediately, it adds.
ISR News: WorldPay (CORRECTION: NOT PROPAY) Suffers $9M Heist
Excerpts From Blog.Wired.com
A carefully coordinated global ATM heist last November resulted in a one-day haul of $9 million in cash, after a hacker penetrated a server at payment processor RBS WorldPay, New York’s Fox 5 reports.
(CORRECTING EARLIER POST ON INFORMATION-SECURITY-RESOURCES.COM - NOT PROPAY IDENTIFIED IN DATA SECURITY BREACH)
ISR News: WorldPay Suffers $9M Heist
Excerpts From Blog.Wired.com
A carefully coordinated global ATM heist last November resulted in a one-day haul of $9 million in cash, after a hacker penetrated a server at payment processor RBS WorldPay, New York’s Fox 5 reports.
ISR News: IBM Issues Dire Warnings
Excerpts From ComputerWorld.com’s Tom S. Noda
If there is something companies should continue spending on despite the present global economic crisis, it would have to be IT security, according to Marne Gordan, GRC market manager for IBM’s Tivoli Software Division.
“There are consequences in cutting costs on IT security. Threats could succeed five times to 10 times more,” Gordan said.
ISR News: Feds Warn of Security Meltdown
Excerpts From DarkGovernment.com
Computer attacks pose the biggest risk “from a national security perspective, other than a weapon of mass destruction or a bomb in one of our major cities,” said Shawn Henry, assistant director of the FBI’s cyber division told the International Conference on Cyber Security in New York . According to multiple reports Henry went on to say terrorist groups aim for an online 9/11, “inflicting the same kind of damage on our country, on all our countries, on all our networks, as they did in 2001 by flying planes into buildings.”
ISR News: The Rising Cost of Lost Data
Excerpts From Forbes.com’s Andy Greenberg
According to a report released Monday by the Ponemon Institute and funded by encryption firm PGP, the cost of a data breach for companies has risen to $202 per lost record, up from $197 in the institute’s 2007 study. For the 47 companies audited in the study, those costs added up to $6.6 million per incident.
ISR News: More Cyber-Crime Stats
Excerpts From GovTech.com’s Ulf Wolf
According to the 2007 Internet Crime Complaint Center (IC3) report, 206,884 complaints were filed online for an estimated $239 million loss. However, keep in mind that experts (for once) agree that only 1 in 7 cyber-crimes are reported to the authorities or to sites such as IC3. The accurate cyber-crime figures, then, are roughly seven times higher.
