[ news_security_news ] Rhode Island Hack
John Stith Staff Writer
2006-01-31
Insider Reports RSS Feed
The Rhode Island state government web site suffered a security breach in December with 4,117 credit card numbers lifted from the site. The breach happened because of one line of code used in the Rhode Island office of New England Interactive (NEI), the company that maintains the site.
In an interview in NetworkWorld, Chris Neff a spokesman for NEI's parent company NIC, said, "It was due to an error in a line of software code that our local office in Rhode Island that manages the state's portal [NEI] had written. So we immediately closed that breach, fixed that error and initiated a deeper investigation, including a follow-up security scan of the entire site."
He went on to describe the events surrounding the theft. He said originally, they thought only eight credit cards had been swiped. They contacted all the appropriate authorities, including the Secret Service, the credit card companies involved and Rhode Island CIO.
Then, after looking things back over, they discovered the 4,117 and that changed the dynamics dramatically. NIC realized the larger number of credit card compromises had occurred when information about it showed up on Russian websites.
Apparently, this isn't all over though. The state of Rhode Island feels like NEI hasn't been completely forthcoming regarding and are demanding more information of the company. NEI has yet to respond.
Add to | DiggThis| Yahoo My Web
About the Author:
John is a staff writer for SecurityProNews covering cyber security.
More news_security_news Articles
Insider Reports RSS Feed
|
|