Hacker Found Guilty of Breaching AT&T Site to Obtain iPad Customer Data

[InfoSec News <alerts () infosecnews org>]

http://www.wired.com/threatlevel/2012/11/att-hacker-found-guilty/

By Kim Zetter
Threat Level
Wired.com
11.20.12

A hacker charged with federal crimes for obtaining the personal data of 
more than 100,000 iPad owners from AT&T’s website was found guilty on 
Tuesday.

Andrew Auernheimer, 26, of Fayetteville, Arkansas, was found guilty in 
federal court in New Jersey of one count of identity fraud and one count 
of conspiracy to access a computer without authorization.

The jury reached its verdict just hours after being sequestered.

Auernheimer tweeted to supporters that he expected the verdict and 
planned to appeal.

Auernheimer and Daniel Spitler, 26, of San Francisco, California, were 
charged last year after the two discovered a hole in AT&T’s website in 
2010 that allowed anyone to obtain the e-mail address and ICC-ID of iPad 
users. The ICC-ID is a unique identifier that’s used to authenticate the 
SIM card in a customer’s iPad to AT&T’s network.

[...]

______________________________________________
Visit the InfoSec News Security Bookstore
Best Selling Security Books and More!
http://www.shopinfosecnews.org