Survey outfit exposes 41,000 private records

[lyger <lyger () attrition org>]

> From WK and InfoSec News (http://infosecnews.org):

http://www.theinquirer.net/gb/inquirer/news/2008/07/07/hackers-claim-survey-outfit

TOP MARKET RESEARCH firm TNS Infratest/Emnid has 'lost' 41,000 private
data records of its survey participants, the Chaos Computer Club (CCC)
has revealed in its official organ Die Datenschleuder.

According to CCC, it was a doddle for participants to read master data
records and consumer profiles.

The personal data was easily accessed without being checked by even the
most basic security measures. All you needed to do was change the
customer ID number in the browser's address bar and you could see
everything.

[...]
_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/dataloss

Tenable Network Security offers data leakage and compliance monitoring
solutions for large and small networks. Scan your network and monitor your
traffic to find the data needing protection before it leaks out!
http://www.tenablesecurity.com/products/compliance.shtml