[ insider_reports_insider ]
AT&T Cracked For Credit Cards
David Utter
Staff Writer
2006-08-30
 Insider Reports RSS Feed
An online store used by AT&T for selling DSL equipment experienced a break-in over the weekend, and attackers made off with credit card numbers and personal information on around 19,000 customers.
 | | AT&T Cracked For Credit Cards |  |
Although AT&T detected and fought off the attack a few hours after it began, they still yielded plenty of information to whoever broke in to their network. AT&T said in a statement that fewer than 19,000 customers were affected.
"We deeply regret this incident and we intend to pay for credit monitoring services for customers whose accounts have been impacted," said Priscilla Hill-Ardoin, chief privacy officer for AT&T. "We will work closely with law enforcement to bring these data thieves to account."
AT&T has started notifying customers of its online store of the breach. Those customers will receive information about setting up the credit monitoring service through a toll-free number.
The company has not released details about the breach, other than to note it took place over the weekend. On the architecture side, AT&T makes use of the Solaris 8 operating system, and the Netscape-Enterprise and Sun ONE web servers, on its sites according to Netcraft.
Solaris 8 has been succeeded by Versions 9 and 10 over the past few years. Although many of the operating system's vulnerabilities listed by Secunia can be used to cause a denial of service condition, others exist that, left unpatched, could expose information to a particular attack.
SQL injection attacks on websites have also increased in incidence. If AT&T's store did not properly sanitize form input, a carefully crafted input statement could be responsible for exposing information from the database on the back-end of a web application.
---
Tag: AT&T
Add to  Del.icio.us |  Digg |  Yahoo! My Web |  Furl
Get all the updates in RSS: 
About the Author:
David Utter is a business and technology writer for SecurityProNews and WebProNews.
More insider_reports_insider Articles
Insider Reports RSS Feed
|
|
iEntry 10th Anniversary
RSS
Archive
