Statoil Fuel & Retail closes three customer portals

[security curmudgeon <jericho () attrition org>]

http://www.statoilfuelretail.com/en/newsandmedia/news/Pages/HuginPressRelease_1527060.aspx

Statoil Fuel & Retail closes three customer portals

29 June 2011: On Tuesday 28 June, Statoil Fuel & Retail closed down its 
customer portals in Norway, Sweden and Denmark after becoming aware that 
their information may have been compromised as a result of a data breach. 
The company has also notified the Data Protection Agency of the situation.

"There are indications that client data may have been compromised. We are 
taking this very seriously. At this time we do not have a total overview 
of the scale of the incident, but are working to establish it as soon as 
possible. As an immediate measure we have closed down these three portals 
to prevent unauthorised access while we work to identify the problem and 
install additional security measures", says Bård Standal, general counsel 
at Statoil Fuel & Retail.

Statoil Fuel & Retail is working hard to establish what kinds of 
information may have been extracted from its systems. It cannot currently 
rule out the possibility that customer information has been compromised.

"We have no information that loyalty card information has been misused, 
but as long there is a theoretical possibility that it could happen, we 
are increasing preparedness. Among other actions, we have intensified our 
monitoring of the cards' activity", says Standal.

Statoil Fuel & Retail recommends that anyone seeking assistance should 
contact their local customer services. Relevant contact details are 
available on www.statoil.no, www.statoil.se and www.statoil.dk.

"We apologise for any inconvenience the closure of these customer portals 
may cause our customers. We will publish an update as soon as we have 
confirmed information from our technicians. The customer portals should be 
up as soon as any issues are corrected and their information security is 
safeguarded", says Bård Standal.



For more information please contact:

Karen Romer, SVP Communications Statoil Fuel & Retail ASA, Tel: +47 950 74 
950, karrom () statoilfuelretail com

Inger Sund, Senior communications advisor Statoil Fuel & Retail ASA, Tel: 
+47 468 16 954, insund () statoilfuelretail com

Mitra Hagen Negård, SVP Investor Relations Statoil Fuel & Retail ASA, Tel: 
+47 957 93 631, mine () statoilfuelretail com
_______________________________________________
Dataloss Mailing List (dataloss () datalossdb org)
Archived at http://seclists.org/dataloss/
Unsubscribe at http://datalossdb.org/mailing_list

Learn encryption strategies that manage risk and shore up compliance.
Download Article 1 of CREDANT Technologies' The Essentials Series:
Endpoint Data Encryption That Actually Works
http://credant.com/campaigns/realtime2/gap-LP1/