funsec mailing list archives

[privacy] AOL: Hacker 'Unlikely to Have Stolen Customer Data'


From: "Fergie" <fergdawg () netzero net>
Date: Sat, 28 Apr 2007 00:33:59 GMT

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Via InfoWorld.

[snip]

AOL is investigating the recent hacking of its systems by a New York teen
to determine if he managed to obtain customer data. However, the Time
Warner subsidiary thinks it's unlikely that customer data was compromised.

"This long-term hacker has repeatedly sought to access AOL systems," a
spokeswoman said on Friday. "Our investigation continues, but we believe
that at no point was [he] able to access customer billing data."

For now, AOL isn't notifying any individual customers about the situation.
"While [he] did seek to access accounts, we don't believe there was any
data compromised that would require customer outreach," the spokeswoman
wrote.

This is the first time AOL has issued an official comment about the arrest
of 17-year old Mike Nieves, who faces four felony charges and a misdemeanor
charge for allegedly breaking into AOL networks and databases at different
points between late December and early April. On Thursday, a spokesman for
the Manhattan District Attorney's office said it's too early to tell
whether any data was compromised during the system intrusions.

[snip]

More:
http://www.infoworld.com/article/07/04/27/AOL-hacker-customer-data_1.html

Note: This is why we need a Mandatory Breach Disclosure law -- AOL
should be forced to notify customers whose records or accounts may
have been accessed by this kid.

- - ferg

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.1 (Build 1012)

wj8DBQFGMpZuq1pz9mNUZTMRAtBLAKD0TrTFTzUjjjq9LUJ9LPOtl9ZzDACgtYZy
87/1h5iENX6IRS9xR99Dh9g=
=F/aQ
-----END PGP SIGNATURE-----



--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg(at)netzero.net
 ferg's tech blog: http://fergdawg.blogspot.com/

_______________________________________________
privacy mailing list
privacy () whitestar linuxbox org
http://www.whitestar.linuxbox.org/mailman/listinfo/privacy


Current thread: