Security Breach At Investment Company Compromises Personal Information Of Customers

[InfoSec News <isn () c4i org>]

http://www.wfmy.com/news/topstory_article.aspx?storyid=52617

Timothy Gehret
Reporter   
WFMY News 2
11/25/2005

Greensboro, NC -- Millions of names, addresses, social security
numbers, and bank account numbers could be in dangerous hands.

Officials with Scottrade, an investment company with an office in
Greensboro say a security breach compromised the information of some
of its account holders.

A letter to customers says a hacker broke into the E-secure system
which transfers money from customer's bank accounts to their
investment accounts.

The letter says the breach happened October 25th.

One local Scottrade customer, who wishes to remain anonymous, says he
got the later on November 25th.

"Who knows when the information will drop off from whoever hacked into
the system," the man says. "Who knows if information is up on a chat
room right now being sold to the highest bidder."

Scottrade officials say despite access to the information, they aren't
certain the hacker actually took the information.

The breach does not affect all of Scottrade's customers.

This only affects those who use the E-secure system to transfer money
from their bank account to their investment account.



_________________________________________
Earn your Master's degree in Information Security ONLINE
www.msia.norwich.edu/csi
Study IA management practices and the latest infosec issues.
Norwich University is an NSA Center of Excellence.