BreachExchange mailing list archives

follow-up: i-Pad / AT&T, more information


From: security curmudgeon <jericho () attrition org>
Date: Thu, 10 Jun 2010 15:56:02 -0500 (CDT)


http://gawker.com/5559346/

Apple's Worst Security Breach: 114,000 iPad Owners Exposed

Apple has suffered another embarrassment. A security breach has exposed 
iPad owners including dozens of CEOs, military officials, and top 
politicians. They.and every other buyer of the cellular-enabled 
tablet.could be vulnerable to spam marketing and malicious hacking.

The breach, which comes just weeks after an Apple employee lost an iPhone 
prototype in a bar, exposed the most exclusive email list on the planet, a 
collection of early-adopter iPad 3G subscribers that includes thousands of 
A-listers in finance, politics and media, from New York Times Co. CEO 
Janet Robinson to Diane Sawyer of ABC News to film mogul Harvey Weinstein 
to Mayor Michael Bloomberg. It even appears that White House Chief of 
Staff Rahm Emanuel's information was compromised.

It doesn't stop there. According to the data we were given by the web 
security group that exploited vulnerabilities on the AT&T network, we 
believe 114,000 user accounts have been compromised, although it's 
possible that confidential information about every iPad 3G owner in the 
U.S. has been exposed. We contacted Apple for comment but have yet to hear 
back. We also reached out to AT&T for comment. [Update: AT&T has confirmed 
the breach; an update appears below.] A call to Rahm Emanuel's office at 
the White House has not been returned.

[..]
_______________________________________________
Dataloss-discuss Mailing List (dataloss-discuss () datalossdb org)
Archived at http://seclists.org/dataloss/

Get business, compliance, IT and security staff on the same page with
CREDANT Technologies: The Shortcut Guide to Understanding Data Protection
from Four Critical Perspectives. The eBook begins with considerations
important to executives and business leaders.
http://www.credant.com/campaigns/ebook-chpt-one-web.php


Current thread: