BreachExchange mailing list archives

TechRadar latest site to have usernames and passwords stolen


From: security curmudgeon <jericho () attrition org>
Date: Mon, 25 Jun 2012 19:19:35 -0500 (CDT)


http://nakedsecurity.sophos.com/2012/06/25/techradar-latest-site-to-have-usernames-and-passwords-stolen/

TechRadar latest site to have usernames and passwords stolen
by Chester Wisniewski on June 25, 2012

British tech news site, TechRadar, is the latest in a string of websites 
coming forward to admit they were hacked and user's email addresses, 
usernames, encrypted passwords and dates of birth were accessed by 
criminals.

[Copy of notification letter]

It appears the theft was either self-discovered by TechRadar or disclosed 
privately, as the notices were sent out to users of its forums without it 
having been leaked publicly.

This does bring up an important issue though. Is it really a good idea to 
share your date of birth with a random tech forum?

Why do so many websites, grocery stores, hotels and other establishments 
think it is appropriate to ask for something so important to our 
identities?

[..]
_______________________________________________
Dataloss Mailing List (dataloss () datalossdb org)
Archived at http://seclists.org/dataloss/
Unsubscribe at http://datalossdb.org/mailing_list

Supporters:

Risk Based Security (http://www.riskbasedsecurity.com/)
Risk Based Security equips organizations with security intelligence, risk
management services and on-demand security solutions to establish
customized risk-based programs to address information security and
compliance challenges. 

Tenable Network Security (http://www.tenable.com/)
Tenable Network Security provides a suite of solutions which unify real-time
vulnerability, event and compliance monitoring into a single, role-based, interface
for administrators, auditors and risk managers to evaluate, communicate and
report needed information for effective decision making and systems management.


Current thread: