<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Alertsec Xpress Data Security Blog &#187; alertsec</title>
	<atom:link href="http://blog.alertsec.com/tag/alertsec/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.alertsec.com</link>
	<description></description>
	<lastBuildDate>Sat, 04 Feb 2012 08:18:31 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.1</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Mitsubishi Nuclear and Warplane data compromised</title>
		<link>http://blog.alertsec.com/2011/10/mitsubishi-nuclear-and-warplane-data-compromised/</link>
		<comments>http://blog.alertsec.com/2011/10/mitsubishi-nuclear-and-warplane-data-compromised/#comments</comments>
		<pubDate>Mon, 31 Oct 2011 09:33:44 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Computer security]]></category>
		<category><![CDATA[Data Protection]]></category>
		<category><![CDATA[Hackers]]></category>
		<category><![CDATA[Identity and Information loss]]></category>
		<category><![CDATA[data breach]]></category>
		<category><![CDATA[data encryption]]></category>
		<category><![CDATA[identity theft]]></category>
		<category><![CDATA[alertsec]]></category>
		<category><![CDATA[AlertSec Xpress]]></category>
		<category><![CDATA[checkpoint]]></category>
		<category><![CDATA[EMC]]></category>
		<category><![CDATA[Encryption]]></category>
		<category><![CDATA[Kobe]]></category>
		<category><![CDATA[Lockheed Martin]]></category>
		<category><![CDATA[Military aircraft]]></category>
		<category><![CDATA[Mitsubishi]]></category>
		<category><![CDATA[Mitsubishi Heavy]]></category>
		<category><![CDATA[Mitsubishi Heavy Industries]]></category>
		<category><![CDATA[Nagoya]]></category>
		<category><![CDATA[Nuclear power]]></category>
		<category><![CDATA[Personal computer]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[Tokyo Metropolitan Police Department]]></category>
		<category><![CDATA[United States]]></category>

		<guid isPermaLink="false">http://blog.alertsec.com/?p=2605</guid>
		<description><![CDATA[Hackers don&#8217;t just hack small accounts like Hospital data or Software data. They get into big stuff like military and warplane data too!
According to Japanese Defense Ministry hackers have most probably accessed sensitive data relating to military aircraft, missiles, and nuclear power plant designs and safety systems.
The news in detail
Mitsubishi Heavy&#8211;Japan&#8217;s largest defense contractor is [...]]]></description>
			<content:encoded><![CDATA[<p>Hackers don&#8217;t just hack small accounts like Hospital data or Software data. They get into big stuff like military and warplane data too!</p>
<p>According to Japanese Defense Ministry hackers have most probably accessed sensitive data relating to military aircraft, missiles, and nuclear power plant designs and safety systems.</p>
<p><strong>The news in detail</strong></p>
<p>Mitsubishi Heavy&#8211;Japan&#8217;s largest defense contractor is best known in America for manufacturing the surface-to-air Patriot missile.&#8211;In August it found out that multiple computers were infected with a Trojan application. Further investigation showed that the information had been sent outside the company&#8217;s computer network, clearly indicating an outsider&#8217;s involvement.</p>
<p>The computers were located in 11 different places. Some were placed in sensitive areas like the Kobe and Nagasaki shipyards that are into submarines and destroyers constructions. A few others were located at the Nagoya facility that manufactures guided missile systems. The nuclear data that was stolen included anti-quake measures.</p>
<p>Mitsubishi Heavy Industries was reluctant to share this info at first. It kept the Japanese authorities in dark stating that its military information was safe and that all security measures were followed. Initially the company said that the attackers were caught early on but later contradicted their own statement saying that data had been compromised.</p>
<p><strong>Statement issued by the company</strong></p>
<p>&#8220;The company recently confirmed unintended transferring of some information on the company&#8217;s products and technologies between servers within the company,&#8221; said Mitsubishi Heavy in a statement. &#8220;Based on the finding, the company investigated the incident further and recognized the possibility of some data leakage from the server in question.&#8221;</p>
<p><strong>Other recent military data breaches</strong></p>
<p>Lockheed Martin, which manufactures the F-22 Raptor and F-35 Lightning II fighter aircraft, was a victim of military data theft recently. The Lockheed hack was done by using information stolen earlier from RSA Security. RSA is the branch of EMC that produces the SecurID two-factor authentication token used by thousands of contractors and corporations to secure their networks.</p>
<p><strong>What are the Tokyo Police doing about it?</strong></p>
<p>Mitsubishi Heavy has given a complaint to the Tokyo Metropolitan Police Department with details about damage done to its computer system in late September. The police are looking into computer records to find out the source of the data.</p>
<p><strong>Protect your confidential data with Alertsec</strong></p>
<p>Alertsec Xpress offers a customizable data encryption software solution from Checkpoint, the industry leader in encryption software (former Pointsec). Alertsec has come up with a web based encryption service that helps in deployment and management of PC encryption.</p>
<p>The need of a Data encryption software and recovery software is felt by big and small companies in today&#8217;s vulnerable data world. The threat could have simply been reduced to an insurance matter by a mere investment of $13/month. Certainly a small price to pay compared to what can happen if you lose confidential or sensitive data. Alertsec Xpress offers a very good and easy-to-use laptop security service that includes more than the traditional software licensing model.</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.alertsec.com/2011/10/mitsubishi-nuclear-and-warplane-data-compromised/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Contractor to be blamed for Stanford Hospital&#8217;s data theft</title>
		<link>http://blog.alertsec.com/2011/10/contractor-blamed-for-stanfor/</link>
		<comments>http://blog.alertsec.com/2011/10/contractor-blamed-for-stanfor/#comments</comments>
		<pubDate>Mon, 10 Oct 2011 04:50:59 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Computer security]]></category>
		<category><![CDATA[Data Protection]]></category>
		<category><![CDATA[Lawsuits and settlements]]></category>
		<category><![CDATA[Security Flaw]]></category>
		<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[computer security software]]></category>
		<category><![CDATA[data breach]]></category>
		<category><![CDATA[data encryption]]></category>
		<category><![CDATA[alertsec]]></category>
		<category><![CDATA[Emergency department]]></category>
		<category><![CDATA[Enter your zip code here]]></category>
		<category><![CDATA[MSCS]]></category>
		<category><![CDATA[Patient]]></category>
		<category><![CDATA[Stanford Hospital]]></category>
		<category><![CDATA[Stanford Hospital Clinics]]></category>
		<category><![CDATA[Student of Fortune]]></category>
		<category><![CDATA[Website]]></category>

		<guid isPermaLink="false">http://blog.alertsec.com/?p=2520</guid>
		<description><![CDATA[

Third parties have recently been in the news for data breaches. You give your data for security purpose to a third party contractor and Bam! The next thing you know is it is stolen!
The recent case detailed below talks about a breach that exposed the personal data of some 20,000 patients, thanks to the contractor&#8217;s [...]]]></description>
			<content:encoded><![CDATA[<div class="zemanta-img" style="margin: 1em; display: block;">
<div class="wp-caption alignright" style="width: 310px"><a href="http://en.wikipedia.org/wiki/File:Stanford-hospital-entrance.JPG"><img title="Stanford-hospital-entrance" src="http://upload.wikimedia.org/wikipedia/en/thumb/2/26/Stanford-hospital-entrance.JPG/300px-Stanford-hospital-entrance.JPG" alt="Stanford-hospital-entrance" width="300" height="225" /></a><p class="wp-caption-text">Stanford Hospitals blamed for data breach</p></div>
</div>
<p>Third parties have recently been in the news for data breaches. You give your data for security purpose to a third party contractor and Bam! The next thing you know is it is stolen!</p>
<p>The recent case detailed below talks about a breach that exposed the personal data of some 20,000 patients, thanks to the contractor&#8217;s negligence.</p>
<p><strong>Stanford Hospital Clinics class action suit</strong></p>
<p><a href="http://www.esecurityplanet.com/network-security/stanford-hospital-acknowledges-major-security-lapse.html">20,000 patients&#8217; personal information was made available</a> on a public Web site for a year. That led to the class action suit against Stanford Hospitals.</p>
<p>Shana Springer, one of the patients whose information was compromised, filed the class-action lawsuit against Stanford Hospital &amp; Clinics and Multi-Specialty Collection Services.  Stanford Hospital &amp; Clinics and Multi-Specialty Collection Services is an outside vendor that was allegedly responsible for the breach. The lawsuit asks for $1,000 per patient.</p>
<p>Here is what the hospital spokesperson had to say: The hospital intends to vigorously defend the lawsuit that has been filed as it acted appropriately and did not violate the law as claimed in the lawsuit,&#8217;&#8221;</p>
<p><strong>Case details</strong></p>
<p>A spreadsheet maintained by a third party billing contractor, Multi Specialties Collection Services (MSCS), was allegedly posted on Student of Fortune website that allows students solicit homework help for a fee.</p>
<p>The spreadsheet apparently included names, diagnosis codes, account numbers as well as admission and discharge dates of about 20,000 patients who visited the hospital’s Emergency Room in 2009.</p>
<p>According to Stanford Hospitals, this data was encrypted. But looks it MSCS decrypted the data and put it into a spreadsheet. A person who had probably no clue about what he was doing and posted it on the website further managed this spreadsheet. The identity of this individual has not been divulged by MSCS.</p>
<p>Statements released by the hospital:“This mishandling of private patient information was in complete contravention of the law and of the requirements of MSCS’s contract with SHC and is shockingly irresponsible,”</p>
<p>According to the MSCS contractor, Frank Corcino, he decrypted the details and put it into a spreadsheet. He later handed off the spreadsheet to a job applicant as parts of a skills test.</p>
<p>It appears that the applicant was unaware the spreadsheet data was private and posted it on the homework help site in Sept. 2010. The data remained on the site until August 22, 2011 and was later discovered by a patient.</p>
<p><strong>What AlertSec has to say?</strong></p>
<p>Alertsec is the frontrunner in offering hard disk encryption as a fully managed service. We provide information security in a cost-effective &amp; easy way.</p>
<p>By using encryption software, you greatly enhance the laptop security, as there is no way that the information is compromised if lost or stolen. A theft would simply be reduced to an insurance matter and cost of the hardware plus time to rebuild the laptop. A small price to pay compared to what can happen if you lose confidential or senstive data. Our <a href="http://www.alertsec.com/index.php?page=ov_industry_news">industry news</a> provides a few examples of this.</p>
<p>Alertsec Xpress offers a very good and easy-to-use laptop security service that includes more than the traditional software-licensing model.</p>
<p><strong><br />
</strong></p>
<div class="zemanta-pixie" style="margin-top: 10px; height: 15px;"><a class="zemanta-pixie-a" title="Enhanced by Zemanta" href="http://www.zemanta.com/"><img class="zemanta-pixie-img" style="border: none; float: right;" src="http://img.zemanta.com/zemified_e.png?x-id=1496b5f4-a345-4081-9807-c04de61d882e" alt="Enhanced by Zemanta" /></a></div>
]]></content:encoded>
			<wfw:commentRss>http://blog.alertsec.com/2011/10/contractor-blamed-for-stanfor/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>PhyData LLC reports laptop containing data of 1500 patients stolen</title>
		<link>http://blog.alertsec.com/2011/07/phydata-llc-reports-laptop-containing-data-of-1500-patients-stolen/</link>
		<comments>http://blog.alertsec.com/2011/07/phydata-llc-reports-laptop-containing-data-of-1500-patients-stolen/#comments</comments>
		<pubDate>Mon, 04 Jul 2011 06:04:48 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Computer security]]></category>
		<category><![CDATA[Encryption]]></category>
		<category><![CDATA[Identity and Information loss]]></category>
		<category><![CDATA[computer security software]]></category>
		<category><![CDATA[identity theft]]></category>
		<category><![CDATA[laptop encryption]]></category>
		<category><![CDATA[laptop theft]]></category>
		<category><![CDATA[alertsec]]></category>
		<category><![CDATA[computer encryption software]]></category>
		<category><![CDATA[data security]]></category>
		<category><![CDATA[data theft prevention]]></category>
		<category><![CDATA[Hardware]]></category>
		<category><![CDATA[Kroll Inc]]></category>
		<category><![CDATA[laptop]]></category>
		<category><![CDATA[Notebooks and Laptops]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[Theft]]></category>

		<guid isPermaLink="false">http://blog.alertsec.com/?p=2178</guid>
		<description><![CDATA[

Laptop theft
The  most prevailing fear among most  computer users is that of Laptop theft. No matter how much care you take, thieves manage to get away with such thefts.
Corporate America looses over USD 5.4 billion each year in cases of laptop theft. That means 12,000 laptops disappear every week from U.S. airports alone, and a laptop [...]]]></description>
			<content:encoded><![CDATA[<div class="zemanta-img" style="margin: 1em; display: block;">
<div class="wp-caption alignright" style="width: 310px"><a href="http://commons.wikipedia.org/wiki/File:Benq_joybook_transparent.png"><img title="My BenQ Joybook 8100 showing the Dutch BenQ ar..." src="http://upload.wikimedia.org/wikipedia/commons/thumb/f/fe/Benq_joybook_transparent.png/300px-Benq_joybook_transparent.png" alt="My BenQ Joybook 8100 showing the Dutch BenQ ar..." width="300" height="225" /></a><p class="wp-caption-text">Laptop stolen from car containing patient data</p></div>
</div>
<p><strong>Laptop theft</strong></p>
<p>The  most prevailing fear among most  computer users is that of Laptop theft. No matter how much care you take, thieves manage to get away with such thefts.</p>
<p>Corporate America looses over USD 5.4 billion each year in cases of laptop theft. That means 12,000 laptops disappear every week from U.S. airports alone, and a laptop is stolen every 53 seconds. As employees get more and more mobile, this problem becomes more serious.  If you add to this healthcare privacy laws, then asset security can impact your business significantly.</p>
<p>The recent news of laptop being stolen from an employee&#8217;s car in Goodlettsville, Tenn. got security experts thinking if enough was being done in the field of data security.</p>
<p><strong>The report</strong></p>
<p>According to the report, PhyData LLC, a medical billing and management company  reported a laptop stolen from an employee&#8217;s car on May 7 at the RiverGate Mall. The laptop contained more than 1,500 patient names and their personal information including names, Social Security numbers, dates of birth and medical ID numbers.</p>
<p>These people were patients with Advanced Diagnostic Imaging , Premier Radiology and Anesthesia Services Associates between Jan. 2009 and Dec. 2010</p>
<p>PhyData spokeswoman Joy Sweeney said in a statement that no evidence was found that any of the information had been accessed or misused. She further stated that the company had set up a toll-free help line with Kroll Inc., and is offering identity-theft protection services to affected patients. The company&#8217;s laptops are also now all encrypted and password protected</p>
<p><strong>What Tennessean&#8217;s had to say</strong></p>
<p>&#8220;Stolen from the trunk. That alone sounds strange when detailing where the thief stole it and wasn&#8217;t drawing any attention, from busting in the trunk. When the true story comes forward we will see the employee left it inattentive&#8221;</p>
<p>&#8220;Taken from the trunk? Was there signage on the auto? Why would someone open a trunk with so many other cars around and possible property in view? This IS NOT the whole story on this one&#8221;</p>
<p>&#8220;<strong>There is no conspiracy</strong>.  Usually, when the trunk gets busted it&#8217;s because the driver parked and then placed valuable items in the trunk, thinking that it&#8217;d be safer.  Someone in the parking lot &#8212; possibly thieves looking to catch people placing stuff in their trunks &#8212; watches the driver from the moment he enters the garage and, once they&#8217;re sure the driver won&#8217;t be back, go to work.  After all, if an item weren&#8217;t valuable, why would anyone go through the effort of putting it in the trunk.&#8221;</p>
<p><strong>What AlertSec has to say?</strong></p>
<p>Alertsec is the frontrunner in offering hard disk encryption as a fully managed service. We provide information security in a cost-effective &amp; easy way</p>
<p>By using encryption software, you greatly enhance the laptop security as there is no way that the information is compromised if lost or stolen. A theft would simply be reduced to an insurance matter and cost of the hardware plus time to rebuild the laptop. A small price to pay compared to what can happen if you lose confidential or sensitive data. Our industry news provides a few examples of this.</p>
<p>Alertsec Xpress offers a very good and easy-to-use laptop security service that includes more than the traditional software licensing model. Feel free to subscribe for your personal  30 day trial.</p>
<div class="zemanta-pixie" style="margin-top: 10px; height: 15px;"><a class="zemanta-pixie-a" title="Enhanced by Zemanta" href="http://www.zemanta.com/"><img class="zemanta-pixie-img" style="border: none; float: right;" src="http://img.zemanta.com/zemified_e.png?x-id=11afe668-6cf3-4a3f-81d0-ac3e5a4d4e12" alt="Enhanced by Zemanta" /></a></div>
]]></content:encoded>
			<wfw:commentRss>http://blog.alertsec.com/2011/07/phydata-llc-reports-laptop-containing-data-of-1500-patients-stolen/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Goatse Security hacking group orchestrated a security breach of AT&amp;T&#8217;s servers</title>
		<link>http://blog.alertsec.com/2011/06/goatse-security-hacking-group-orchestrated-a-security-breach-of-atts-servers/</link>
		<comments>http://blog.alertsec.com/2011/06/goatse-security-hacking-group-orchestrated-a-security-breach-of-atts-servers/#comments</comments>
		<pubDate>Wed, 29 Jun 2011 04:39:19 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Computer security]]></category>
		<category><![CDATA[Data Protection]]></category>
		<category><![CDATA[Encryption]]></category>
		<category><![CDATA[computer security software]]></category>
		<category><![CDATA[data breach]]></category>
		<category><![CDATA[data encryption]]></category>
		<category><![CDATA[alertsec]]></category>
		<category><![CDATA[AT&T]]></category>
		<category><![CDATA[breach notification]]></category>
		<category><![CDATA[computer encryption software]]></category>
		<category><![CDATA[data security]]></category>
		<category><![CDATA[Federal Bureau of Investigation]]></category>
		<category><![CDATA[Hacker (computer security)]]></category>
		<category><![CDATA[Internet Relay Chat]]></category>
		<category><![CDATA[IPad]]></category>
		<category><![CDATA[Personal computer]]></category>
		<category><![CDATA[Subscriber Identity Module]]></category>
		<category><![CDATA[Weev]]></category>

		<guid isPermaLink="false">http://blog.alertsec.com/?p=2171</guid>
		<description><![CDATA[







Cybercrime
Wikipedia defines cybercrime as &#8220;any crime that involves a computer and a network. The computer may have been used in the commission of a crime, or it may be the target. A computer can be a source of evidence. Even though the computer is not directly used for criminal purposes, it is an excellent device for record keeping, particularly [...]]]></description>
			<content:encoded><![CDATA[<div class="zemanta-img" style="margin: 1em; display: block;">
<div class="mceTemp">
<dl class="wp-caption alignright" style="width: 250px;">
<dt class="wp-caption-dt"><a href="http://www.flickr.com/photos/99428956@N00/5492207934"><img title="Apple iPad 2 WHITE???" src="http://farm6.static.flickr.com/5213/5492207934_fb464721f9_m.jpg" alt="Apple iPad 2 WHITE???" width="240" height="181" /></a></dt>
<dd class="wp-caption-dd zemanta-img-attribution" style="font-size: 0.8em;"></dd>
</dl>
</div>
</div>
<p><strong>Cybercrime</strong></p>
<p>Wikipedia defines cybercrime as &#8220;any crime that involves a <a title="Computer" href="http://en.wikipedia.org/wiki/Computer">computer</a> and a <a title="Computer network" href="http://en.wikipedia.org/wiki/Computer_network">network</a>. The computer may have been used in the commission of a crime, or it may be the target<strong>. </strong>A computer can be a source of <a title="Evidence" href="http://en.wikipedia.org/wiki/Evidence">evidence</a>. Even though the computer is not directly used for criminal purposes, it is an excellent device for record keeping, particularly given the power to encrypt the data. If this evidence can be obtained and decrypted, it can be of great value to criminal investigators&#8221;.</p>
<p><strong>The AT&amp;T iPad hacking case</strong></p>
<p>More than 100,000 Apple iPad users were a victim of data breach after the hackers accessed AT&amp;T&#8217;s servers<strong>. </strong>Last June, Daniel Spitler of San Francisco, Calif., and Andrew Auernheimer of Fayetteville, Ark. broke into a computer without user authorization. They tried to obtain email addresses from the SIM card addresses of at least 114,000 iPad 3G users. Initially the attack appeared to be a sophisticated hack, the actual exploit used an automated script to submit HTTP requests for thousands of possible serial numbers and collect AT&amp;T&#8217;s responses.</p>
<p>Post-breach, AT&amp;T issued a statement. &#8220;This issue was escalated to the highest levels of the company and was corrected by Tuesday. We are continuing to investigate and will inform all customers whose e-mail addresses&#8230; may have been obtained,&#8221;.</p>
<p><strong>How Daniel pilfered AT&amp;T&#8217;s servers?</strong></p>
<p>Daniel Spitler wrote a script called the &#8220;iPad 3G Account Slurper&#8221; and used it to access AT&amp;T servers thereby getting info on e-mail addresses and associated unique iPad numbers. Spitler got in touch with co-defendant Andrew Auernheimer over Internet Relay Chat and they both hatched the plan of taking advantage of the Web site hole and the data from 100,000 accounts that was exposed.</p>
<p><strong>Update on the case</strong></p>
<p>Daniel Spitler has pleaded guilty to breaking into AT&amp;T&#8217;s systems and obtaining the email addresses of iPad users. He is allegedly member of the Goatse Security hacking group. Spitler faces up to 10 years in prison and, $500,000 in fines on one count of conspiracy to gain unauthorized access to computers and on one count of identity theft. He is scheduled to be sentenced September 28 in Newark federal court.</p>
<p>Andrew Auernheimer was arrested January 18 in Fayetteville, Ark., while appearing in state court. Charges against him are still pending. He had pleaded not-guilty saying that he and his Goatse Security hacking group were planning to warn AT&amp;T about the hole and notifying iPad 3G customers about the exposure of their data. But the chat logs were evidence enough to point out that they had not contacted AT&amp;T.</p>
<p>&#8220;The magnitude of this crime affected everyone from high ranking members of the White House staff to the average American citizen,&#8221; said Michael B. Ward, special agent in charge of the FBI&#8217;s Newark Division. &#8220;It&#8217;s important to note that it wasn&#8217;t just the hacking itself that was criminal, but what could potentially occur utilizing the pilfered information.&#8221;</p>
<p><strong>How Alertsec can protect our computers?</strong></p>
<p>Alertsec provides protection for all information stored on laptops and PCs in an easy, convenient, and cost-effective way. It uses Check Point Full Disk Encryption (former Pointsec) software, and has created a web based encryption service that radically simplifies deployment and management of PC encryption.</p>
<p>Alertsec Xpress is the service that automatically protects ALL information you store on your PC</p>
<h4>Alertsec Xpress provides:</h4>
<ul>
<li>Fully managed service for your convenience.</li>
<li>Very cost effective service.</li>
<li>Market leading laptop protection service.</li>
<li>Quick and easy implementation.</li>
<li>Easy to use protection.</li>
<li>Transparent solution.</li>
<li>Global 24/7 helpdesk.</li>
<li>100% secure and reliable encryption.</li>
<li>Powered by <a href="http://www.pointsec.com/">Check Point</a> &#8211; the market leader</li>
</ul>
<div class="zemanta-pixie" style="margin-top: 10px; height: 15px;"><a class="zemanta-pixie-a" title="Enhanced by Zemanta" href="http://www.zemanta.com/"><img class="zemanta-pixie-img" style="border: none; float: right;" src="http://img.zemanta.com/zemified_e.png?x-id=b4a90924-0f04-4306-bacf-0c1b3b331cd8" alt="Enhanced by Zemanta" /></a></div>
]]></content:encoded>
			<wfw:commentRss>http://blog.alertsec.com/2011/06/goatse-security-hacking-group-orchestrated-a-security-breach-of-atts-servers/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>NATO could be the next victim of a data breach</title>
		<link>http://blog.alertsec.com/2011/06/nato-could-be-the-next-victim-of-a-data-breach/</link>
		<comments>http://blog.alertsec.com/2011/06/nato-could-be-the-next-victim-of-a-data-breach/#comments</comments>
		<pubDate>Mon, 27 Jun 2011 05:27:00 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Data Protection]]></category>
		<category><![CDATA[data breach]]></category>
		<category><![CDATA[data encryption]]></category>
		<category><![CDATA[alertsec]]></category>
		<category><![CDATA[Arizona]]></category>
		<category><![CDATA[Bookselling]]></category>
		<category><![CDATA[breach notification]]></category>
		<category><![CDATA[Check Point]]></category>
		<category><![CDATA[computer encryption software]]></category>
		<category><![CDATA[Computer security]]></category>
		<category><![CDATA[Credit card]]></category>
		<category><![CDATA[data theft prevention]]></category>
		<category><![CDATA[disk encryption]]></category>
		<category><![CDATA[full disk encryption]]></category>
		<category><![CDATA[NATO]]></category>
		<category><![CDATA[Personally identifiable information]]></category>

		<guid isPermaLink="false">http://blog.alertsec.com/?p=2166</guid>
		<description><![CDATA[

Data breach and its definition
Data breach incidents range from planned attacks of organized crime on a national government website to carelessly selling of used computer equipment or data storage media. Definition &#8220;A data breach is a security incident in which sensitive, protected or confidential data is copied, transmitted, viewed, stolen or used by an individual unauthorized [...]]]></description>
			<content:encoded><![CDATA[<div class="zemanta-img" style="margin: 1em; display: block;">
<div class="wp-caption alignright" style="width: 310px"><a href="http://en.wikipedia.org/wiki/File:NATO_in_Europe.png"><img title="Map to show current affiliations of european c..." src="http://upload.wikimedia.org/wikipedia/en/thumb/c/c0/NATO_in_Europe.png/300px-NATO_in_Europe.png" alt="Map to show current affiliations of european c..." width="300" height="262" /></a><p class="wp-caption-text">NATO&#39;s e-Bookshop attacked</p></div>
</div>
<p><strong>Data breach and its definition</strong></p>
<p>Data breach incidents range from planned attacks of <a title="Organized crime" href="http://en.wikipedia.org/wiki/Organized_crime">organized crime</a> on a <a title="National government" href="http://en.wikipedia.org/wiki/National_government">national government</a> website to carelessly selling of used computer equipment or data storage media. Definition &#8220;A data breach is a security incident in which sensitive, protected or confidential data is copied, transmitted, viewed, stolen or used by an individual unauthorized to do so.&#8221;</p>
<p><strong>What do data breaches include?</strong></p>
<p>Data breaches include financial information such as credit card or bank details, personal health information (PHI), personally identifiable information (PII), trade secrets of corporations or intellectual property</p>
<p><strong>What happened at NATO?</strong></p>
<p>NATO was recently notified of a possible data breach from a NATO-related website run by an external company</p>
<p>The North Atlantic Treaty Organization (NATO) has issued a statement</p>
<p>&#8220;Police dealing with digital crimes have notified NATO of a probable data breach from a NATO-related website operated by an external company. NATO&#8217;s e-Bookshop is a separate service for the public for the release of NATO information and does not contain any classified data. Access to the site has been blocked and subscribers have been notified.&#8221;</p>
<p><strong>In detail</strong></p>
<p>The e-Bookshop site offers free access for the general public to NATO publications and multimedia products in both electronic and print format s and does not contain classified documents.</p>
<p>The site has been closed down and users have been informed. The virtual bookstore is reachable though, through the NATO web address.</p>
<p>NATO has not disclosed as to what data was lost or how the attackers hit the server. It has just informed about a data breach and confirmed that no confidential data was compromised.</p>
<p>Speculation about the attack being related to NATO&#8217;s recent clash with the online group Anonymous is very high. The global organization had warned member nations about the rising threat of &#8220;hacktivism,&#8221; or carrying out cyberattacks for political purposes.</p>
<p>But &#8220;Anonymous&#8221; has completely defended this crime saying &#8220;NATO fears the group not because it&#8217;s a &#8220;threat to society,&#8221; but because it&#8217;s a &#8220;threat to the established hierarchy.&#8221; It further added &#8220;This is no longer your world. It is our world – the people&#8217;s world.<br />
&#8221;<br />
<strong>NATO&#8217;s strategy</strong></p>
<p>NATO’s <a href="http://www.acus.org/natosource/natos-new-strategic-concept">Strategic Concept</a>,  identifies cyber defence as one of the critical tasks to be carried out develop to prevent, detect, defend against and recover from cyber-attacks. NATO defence ministers agreed this month on a <a href="http://www.acus.org/natosource/nato-revises-cyber-defense-policy">cyber defence action plan</a> to limit these attacks. This action plan is <a href="http://www.acus.org/new_atlanticist/nato-cyber-defense-moving-past-summit">already being implemented</a>.</p>
<p><strong>LulzSec group attacks at the same time</strong></p>
<p>The LulzSec hacker group has broken into official computers used by the State of Arizona. The accessed data which includes personal emails, names, addresses and passwords of officials, along with confidential document has been <a rel="external" href="http://lulzsecurity.com/releases/chinga_la_migra_1.txt" target="_blank">made public</a> online.</p>
<p><strong>The number 1 laptop encryption service &#8211; Alertsec</strong></p>
<p>3 easy steps to encrypt your data</p>
<p>a. <span>Register for your subscription or 30-day free trial of our encryption software</span></p>
<p><span>b. </span>Download and activate Alertsec Xpress online</p>
<p>c. Your laptop is now powered by Check Point Full Disk Encryption<strong> </strong></p>
<div class="zemanta-pixie" style="margin-top: 10px; height: 15px;"><a class="zemanta-pixie-a" title="Enhanced by Zemanta" href="http://www.zemanta.com/"><img class="zemanta-pixie-img" style="border: none; float: right;" src="http://img.zemanta.com/zemified_e.png?x-id=71130857-13ca-4651-bc8e-c0761cd872b6" alt="Enhanced by Zemanta" /></a></div>
]]></content:encoded>
			<wfw:commentRss>http://blog.alertsec.com/2011/06/nato-could-be-the-next-victim-of-a-data-breach/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Video game maker Sega the latest victim of data breach</title>
		<link>http://blog.alertsec.com/2011/06/video-game-maker-sega-the-latest-victim-of-data-breach/</link>
		<comments>http://blog.alertsec.com/2011/06/video-game-maker-sega-the-latest-victim-of-data-breach/#comments</comments>
		<pubDate>Wed, 22 Jun 2011 07:34:48 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[data breach]]></category>
		<category><![CDATA[alertsec]]></category>
		<category><![CDATA[breach notification]]></category>
		<category><![CDATA[computer encryption software]]></category>
		<category><![CDATA[Computer security]]></category>
		<category><![CDATA[Credit card]]></category>
		<category><![CDATA[data encryption]]></category>

		<guid isPermaLink="false">http://blog.alertsec.com/?p=2141</guid>
		<description><![CDATA[
With every new data breach, hackers are proving their smartness and honing their hacking skills. The gaming world appears to be an lucrative area for them as the latest victim to have online identities and passwords stolen is Video game maker Sega. Sega produces games for a range of consoles, including the PlayStation 3, Nintendo [...]]]></description>
			<content:encoded><![CDATA[<div class="zemanta-img" style="margin: 1em; display: block;"><a href="http://www.last.fm/music/SEGA"><img title="SEGA" src="http://userserve-ak.last.fm/serve/126/48547407.jpg" alt="SEGA" /></a></div>
<p>With every new data breach, hackers are proving their smartness and honing their hacking skills. The gaming world appears to be an lucrative area for them as the latest victim to have online identities and passwords stolen is Video game maker Sega. Sega produces games for a range of consoles, including the PlayStation 3, Nintendo DS, Microsoft’s Xbox 360 and Nintendo’s motion-control Wii.</p>
<p>Sega&#8217;s servers were accessed and information belonging to 1.3 million customers was stolen from Sega’s database. That  included names, email addresses, dates of birth and encrypted (not hashed or plain-text) passwords.</p>
<p>Surprisingly credit card numbers have not been affected. Sega Pass, Sega’s online system for giving newsletters, demos and other perks, had been closed for a complete investigation.</p>
<p>As per the latest update, 1,290,755 accounts have been compromised. Sega confirmed that no financial; data was stolen. Sega&#8217;s network is being currently strengthened and Lulz Security has taken the lead to find the perpetrators. They stated on <a href="https://twitter.com/#!/LulzSec/status/81765889329991680" target="_blank">Twitter</a> that they would help “destroy” the responsible party because they love the Dreamcast.</p>
<p>What is puzzling is that the attack on Sega&#8217;s network took place <em>after</em> it confimed to have put new security measures following the data breach on Sony&#8217;s PlayStation Network</p>
<p>“We are deeply sorry for causing trouble to our customers. We want to work on strengthening security,” Sega spokeswoman Yoko Nagasawa told Reuters, adding it is unclear when the firm would restart Sega Pass.</p>
<p>According to BBC report, customers have been advised  to change their log-on details on other services and websites where they used the same credentials. In addition, Sega has reset all customer passwords.</p>
<p><strong>Comparison with breach at Sony&#8217;s and Citigroup</strong></p>
<p>Sega handled this situation better than Sony and <a href="http://online.wsj.com/article/SB10001424052702303499204576390124145255088.html" target="_blank">Citigroup</a>. It locked down the system and <em>wasted no time </em>in informing its customers. Sony informed almost after a week and Citigroup had the nerve to tell people that they didn’t disclose information because they didn’t want to shock customers !</p>
<p><strong>Reality check</strong></p>
<p>No system is 100% secure. So in case data theft takes place what is important is</p>
<p>1) Financial data does not get affected and</p>
<p>2) Systems should be immediately closed down, customers should be informed on time and security ought to be strengthened</p>
<p><strong>Time for Alertsec to step in</strong></p>
<p>By using industry leading Check Point Full Disk Encryption (former Pointsec) software, Alertsec has created a web based encryption service that radically simplifies deployment and management of PC encryption</p>
<p>Alertsec&#8217;s mission is to continuously improve our products and services in order to deliver the easiest and most cost-effective managed encryption service on the market</p>
<p>The only way to protect information stored on a PC or laptop is by using encryption. Alertsec Xpress offers full disk encryption and is therefore superior to other encryption methods when comparing security, performance, robustness and ease-of-use for both administrators and users</p>
<div class="zemanta-pixie" style="margin-top: 10px; height: 15px;"><a class="zemanta-pixie-a" title="Enhanced by Zemanta" href="http://www.zemanta.com/"><img class="zemanta-pixie-img" style="border: none; float: right;" src="http://img.zemanta.com/zemified_e.png?x-id=a274875f-a9e7-4eaa-9427-1c106e1d2cfd" alt="Enhanced by Zemanta" /></a></div>
]]></content:encoded>
			<wfw:commentRss>http://blog.alertsec.com/2011/06/video-game-maker-sega-the-latest-victim-of-data-breach/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>London Health Programmes under fire for failing to report laptop loss</title>
		<link>http://blog.alertsec.com/2011/06/london-health-programmes-under-fire-for-failing-to-report-laptop-loss/</link>
		<comments>http://blog.alertsec.com/2011/06/london-health-programmes-under-fire-for-failing-to-report-laptop-loss/#comments</comments>
		<pubDate>Sun, 19 Jun 2011 14:52:28 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Computer security]]></category>
		<category><![CDATA[laptop theft]]></category>
		<category><![CDATA[alertsec]]></category>
		<category><![CDATA[AlertSec Xpress]]></category>
		<category><![CDATA[computer encryption software]]></category>
		<category><![CDATA[Health care]]></category>
		<category><![CDATA[laptop]]></category>
		<category><![CDATA[London]]></category>
		<category><![CDATA[Medical research]]></category>
		<category><![CDATA[National Health Service]]></category>
		<category><![CDATA[Notebooks and Laptops]]></category>
		<category><![CDATA[Sun]]></category>
		<category><![CDATA[Theft]]></category>

		<guid isPermaLink="false">http://blog.alertsec.com/?p=2132</guid>
		<description><![CDATA[

In the last few posts we talked about data theft/illegal data accessing. This post talks about the physical theft i.e. stealing of laptops ! Laptop theft is a significant threat to computer users. Many tools such as laptop locks, alarms and visual deterrents such as stickers or labels have been developed to prevent laptop theft.  Victims of [...]]]></description>
			<content:encoded><![CDATA[<div class="zemanta-img" style="margin: 1em; display: block;">
<div class="wp-caption alignright" style="width: 190px"><a href="http://www.flickr.com/photos/17267678@N00/334126869"><img class=" " title="Laptops" src="http://farm1.static.flickr.com/155/334126869_4af23175f6_m.jpg" alt="Laptops" width="180" height="240" /></a><p class="wp-caption-text">Laptop Loss is a Major Business Risk</p></div>
</div>
<p>In the last few posts we talked about data theft/illegal data accessing. This post talks about the physical theft i.e. stealing of laptops ! Laptop theft is a significant <a title="Threat (computer)" href="http://en.wikipedia.org/wiki/Threat_%28computer%29">threat</a> to computer users. Many tools such as laptop locks, alarms and visual deterrents such as stickers or labels have been developed to prevent laptop <a title="Theft" href="http://en.wikipedia.org/wiki/Theft">theft</a>.  Victims of such a theft lose hardware, software and important data if they fail to back it up.</p>
<p><a href="www.london.nhs.uk">London Health Programmes</a>, a medical research organisation based at the NHS North Central London health authority, has lost 20 laptops. This could be the biggest ever <a href="http://email.computerweekly.com/cgi-bin1/DM/t/nCbR60c7aYR0BWYU0Zf1w0Ez">health care data breach</a> suffered by the NHS.</p>
<p>Only 3 laptops have been recovered so far. One of the missing computers contained details of 8.63 million people and the <a href="http://searchsecurity.techtarget.co.uk/news/1368087/Recent-breaches-show-data-theft-prevention-basics-lacking">NHS medical records</a> of 18 million hospital visits, operations and procedures. The information included the postcode, age, ethnic origin of the respective patients, but not their names. This machine was, unfortunately, not encrypted. It was taken from a storeroom of NHS.</p>
<p>Any allegation that sensitive personal information has been compromised  is concerning, and we will now make enquiries to establish the full  facts of this alleged data breach,&#8221; the ICO said in a statement on  Wednesday.</p>
<p>According to a spokeswoman for the ICO told ZDNet UK  &#8221;If the data has been breached, the implications could be serious,  according to the ICO. &#8220;[The NHS] holds millions of [bits of] data on  millions of people. They&#8217;re probably the body that hold the most  sensitive data in the UK, they have millions and millions of records  being accessed every day,&#8221;</p>
<p>NHS has suffered multiple breaches in the past few years. The Information Commissioner’s Office issued a public warning to the NHS in the year 2009 to beef up security.</p>
<p>What could be more disturbing is the fact that the laptops could have been encrypted all along. David Tomlinson, managing director of Taunton-based Data Encryption Systems, said the NHS has a licence to run McAfee software on all its computers, including the SafeBoot disk encryption product.</p>
<p>&#8220;If someone wasn&#8217;t encrypting their laptops, questions should be asked,&#8221; he said, &#8220;because they&#8217;ve paid for [the encryption].&#8221;</p>
<p>The <a href="http://www.zdnet.co.uk/news/compliance/2011/01/24/ico-raps-nhsbt-over-data-errors-40091524/">Information Commissioner&#8217;s Office (ICO)</a> and the police are investigating the theft.</p>
<p>Better late than never, the Department of Health issued a statement saying all NHS organisations should ensure laptops are encrypted.</p>
<p><strong> Alertsec at your service</strong></p>
<p>Alertsec Xpress is powered by <a href="http://www.checkpoint.com/pointsec/">Check Point</a> Full Disk Encryption &#8211; the global leader in data encryption software with millions of users worldwide!  This news stresses the need for data protection applications. The loss in the above incident could have simply been reduced to an insurance matter by a mere investment of $13/month.  The amount is meager compared to what the company has lost.  The need of <a title="data encryption software" href="http://www.alertsec.com/index.php?page=ov_about_alertsec" target="_blank">Data encryption software</a> and recovery software cannot be underestimated . Alertsec Xpress offers a very good and easy-to-use laptop security service that includes more than the traditional software licensing model. Feel free to subscribe for your personal <a title="30 day free trial" href="https://www.alertsec.com/order/trial/index.php?step=1" target="_blank">30-day free trial</a></p>
<div class="zemanta-pixie" style="margin-top: 10px; height: 15px;"><a class="zemanta-pixie-a" title="Enhanced by Zemanta" href="http://www.zemanta.com/"><img class="zemanta-pixie-img" style="border: none; float: right;" src="http://img.zemanta.com/zemified_e.png?x-id=9d9aca37-a2b7-47d8-877a-69c6b6f4368e" alt="Enhanced by Zemanta" /></a></div>
]]></content:encoded>
			<wfw:commentRss>http://blog.alertsec.com/2011/06/london-health-programmes-under-fire-for-failing-to-report-laptop-loss/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>A spear phishing attack on IMF</title>
		<link>http://blog.alertsec.com/2011/06/a-spear-phishing-attack-on-imf/</link>
		<comments>http://blog.alertsec.com/2011/06/a-spear-phishing-attack-on-imf/#comments</comments>
		<pubDate>Thu, 16 Jun 2011 01:10:49 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[data breach]]></category>
		<category><![CDATA[alertsec]]></category>
		<category><![CDATA[AlertSec Xpress]]></category>
		<category><![CDATA[Cryptography]]></category>
		<category><![CDATA[data theft prevention]]></category>
		<category><![CDATA[drive encryption]]></category>
		<category><![CDATA[Encryption]]></category>
		<category><![CDATA[International Monetary Fund]]></category>
		<category><![CDATA[World Bank]]></category>

		<guid isPermaLink="false">http://blog.alertsec.com/?p=2129</guid>
		<description><![CDATA[

Hackers are not only getting into gaming sites; they are eyeing the monetary world as well. It is the International Monetary Fund (IMF) this time. This happened just after a day Citibank faced cyber attack and names, account numbers and email addresses of more than 200,000 North Americans Citibank account holders were compromised.
Before we move ahead [...]]]></description>
			<content:encoded><![CDATA[<div class="zemanta-img" style="margin: 1em; display: block;">
<div class="wp-caption alignright" style="width: 310px"><a href="http://commons.wikipedia.org/wiki/File:IMF_HQ.jpg"><img title="IMF Headquarters, Washington, DC." src="http://upload.wikimedia.org/wikipedia/commons/thumb/9/99/IMF_HQ.jpg/300px-IMF_HQ.jpg" alt="IMF Headquarters, Washington, DC." width="300" height="237" /></a><p class="wp-caption-text">IMF Headquarters - Image via Wikipedia</p></div>
</div>
<p>Hackers are not only getting into gaming sites; they are eyeing the monetary world as well. It is the International Monetary Fund (IMF) this time. This happened just after a day <a href="http://news.oneindia.in/2011/06/10/citigroup-the-latest-victim-of-high-profile-hackers-aid0156.html" target="_blank">Citibank faced cyber attack</a> and names, account numbers and email addresses of more than 200,000 North Americans Citibank account holders were compromised.</p>
<p>Before we move ahead and discuss the story in detail, let us try to understand the difference between phishing and spear phishing. While phishing floods millions of email inboxes and relies on mass attack, spear phishing is more about selectively targeting individuals who have been identified previously. That means spear phishing can potentially attack  a small bunch of people working in the same organization.</p>
<p>It appears that some foreign government was behind the data breach. According to IMF spokesman David Hawley the incident was under investigation and the fund was completely functional. Fox News reported that the IMF&#8217;s computers had been hacked into similar to the latest incident in November 2008 via malicious software.</p>
<p>The World Bank deactivated a cyberlink it has with the IMF as one of IMF&#8217;s desktop was compromised and large quantity of data was obtained. The hackers had deliberately infected a computer at the IMF with malware trained to steal information. This is a new kind of malware, one that gave hackers broad access toIMF&#8217;s systems &#8211; helping to gain &#8216;hot market&#8217; information. Email warnings about “increased phishing activity”were received on June 1  and employees were warned against opening emails from unknown senders, access suspicious video links or click on attachments . IMF had sent an internal memo on June 8 about the actual cyber-attacks to its board members and employees.</p>
<p>Political foes, especially China, could be behind the attack as data related to monetary policies is of utmost value. The IMF studies the economic stability of its 187 members and analyzes each nation&#8217;s financial risk. It supervises the global financial system and recently played a major role in the economic bailout of Greece, Ireland and Portugal. This came as a rude shock when the country was just grappling with IMF chief <a href="http://www.hotel-industry.co.uk/2011/06/hotel-maids-speak-out-against-dominique-strauss-kahn/">Dominique Strauss-Kahn&#8217;s sexual asasult scandal</a>.</p>
<p>Unless the IMF reveals more information about what data was compromised and how it happened,  it is difficult to figure out who was behind the attack and the extent of the loss. The Federal Bureau of Investigation is in charge of this investigation.</p>
<p><strong>Contact Alertsec for your data security needs</strong></p>
<p>It is clear that the security of world&#8217;s large corporations is at risk. In the absence of <a title="Alertsec Xpress" href="http://www.alertsec.com/index.php?page=ov_about_alertsec" target="_blank">full disk encryption</a>, valuable files can be accessed. To keep your sensitive data safe from thefts and hacking, it is vital to use <a title="Laptop Encryption Software" href="http://www.alertsec.com/" target="_blank">Data encryption software</a>. Data loss prevention systems can also reduce the loss of information. Investing $13/month gives an organization peace of mind. A very small price to pay compared to losing high-quality or sensitive data. <a title="Alertsec Xpress" href="http://www.alertsec.com/index.php?page=ov_about_alertsec" target="_blank">Alertsec Xpress</a> offers a very good and easy-to-use laptop security service that includes more than the traditional software licensing model. Feel free to subscribe for your personal <a title="Alertsec Free Trial" href="https://www.alertsec.com/order/trial/" target="_blank">30-day free trial</a></p>
<div class="zemanta-pixie" style="margin-top: 10px; height: 15px;"><a class="zemanta-pixie-a" title="Enhanced by Zemanta" href="http://www.zemanta.com/"><img class="zemanta-pixie-img" style="border: none; float: right;" src="http://img.zemanta.com/zemified_e.png?x-id=6b791664-abf7-4351-a8af-a42953297f3c" alt="Enhanced by Zemanta" /></a></div>
]]></content:encoded>
			<wfw:commentRss>http://blog.alertsec.com/2011/06/a-spear-phishing-attack-on-imf/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Codemasters &#8216; attacked by hackers&#8217;</title>
		<link>http://blog.alertsec.com/2011/06/codemasters-attacked-by-hackers/</link>
		<comments>http://blog.alertsec.com/2011/06/codemasters-attacked-by-hackers/#comments</comments>
		<pubDate>Sun, 12 Jun 2011 17:01:03 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[data breach]]></category>
		<category><![CDATA[alertsec]]></category>
		<category><![CDATA[AlertSec Xpress]]></category>
		<category><![CDATA[computer encryption software]]></category>
		<category><![CDATA[data encryption]]></category>
		<category><![CDATA[data security]]></category>
		<category><![CDATA[data theft prevention]]></category>
		<category><![CDATA[hacking]]></category>

		<guid isPermaLink="false">http://blog.alertsec.com/?p=2118</guid>
		<description><![CDATA[

It is the era of hacking ! Before the Cyber-world recovers from the recent data attack on Sony and Citigroup, hackers have managed to access personal data of Codemasters &#8217;s users.
The story
The British games developer was attacked on June 3 and personal details like names, addresses and phone numbers of thousands of people were stolen. IP addresses, [...]]]></description>
			<content:encoded><![CDATA[<div class="zemanta-img" style="margin: 1em; display: block;">
<div class="wp-caption alignright" style="width: 310px"><a href="http://en.wikipedia.org/wiki/File:Code-masters-old-logo.jpg"><img title="Company logo, 1986 to 1991" src="http://upload.wikimedia.org/wikipedia/en/thumb/c/c5/Code-masters-old-logo.jpg/300px-Code-masters-old-logo.jpg" alt="Company logo, 1986 to 1991" width="300" height="253" /></a><p class="wp-caption-text">Image via Wikipedia</p></div>
</div>
<p>It is the era of hacking ! Before the Cyber-world recovers from the recent data attack on Sony and Citigroup, hackers have managed to access personal data of Codemasters &#8217;s users.</p>
<p><strong>The story</strong></p>
<p>The British games developer was attacked on June 3 and personal details like names, addresses and phone numbers of thousands of people were stolen. IP addresses, details of last site activity, order history, biographies, Xbox Live Gamer-tags of the Codemasters CodeM database and the DiRT 3 VIP code redemption page were also a part of the theft. Luckily payment details were not hacked into as those were processed by an external provider.</p>
<p>Codemasters.com and its associate web services have been taken off the web till the investigation is on. Users have been advised to log on to the company&#8217;s Facebook Page for more information. US and UK websites have also been redirected to the company&#8217;s <a href="http://http://www.facebook.com/codemasters">Facebook page</a>. A new Web site is in the pipeline.</p>
<p>According to BBC News, the company is still probing about possible suspects. The number of affected users is still not known. It could be anywhere from thousand to hundred thousand. The company said. &#8220;We assure you that we are doing everything within our legal means to track down the perpetrators and take action to the full extent of the law&#8221;</p>
<p><strong>Data Security </strong></p>
<p>Gamers have also been advised to change their passwords linked with Codemasters accounts. Codemasters spokesperson has further advised to refrain from opening any suspicious mail that might lead a user to an illegal website. Users need to be extra cautious of emails asking them to share their password or any other personal information</p>
<p><strong>Users&#8217; reactions</strong></p>
<p>Leanne Lee from Eastbourne, Codemasters website user, blamed the company of being slow to report. She was shocked that she was told a week later after the breach occurred and that too via an impersonal email. According to Brad Langford of Manchester, Codemasters or any video game company for that matter does not really require sensitive information like birth place and birth dates.</p>
<p><strong>Breaking news</strong></p>
<p>&#8216;Epic Games&#8217; suffers cyber attacked  ! Stay tuned..</p>
<p><strong>Data security with Alertsec</strong></p>
<p><a title="alertsec" href="http://www.alertsec.com/" target="_blank">D</a><a title="alertsec" href="http://www.alertsec.com/" target="_blank">ata security</a> is of utmost importance for any organization. This news stresses the need for data protection applications. The loss in the above incident could have simply been reduced to an insurance matter by a mere investment of $13/month.  The amount is meager compared to what the company has lost.  The need of <a title="data encryption software" href="http://www.alertsec.com/index.php?page=ov_about_alertsec" target="_blank">Data encryption software</a> and recovery software cannot be underestimated . Had the company used Alertsec&#8217;s services, the information would have been secure. Alertsec Xpress offers a very good and easy-to-use laptop security service that includes more than the traditional software licensing model. Feel free to subscribe for your personal <a title="30 day free trial" href="https://www.alertsec.com/order/trial/index.php?step=1" target="_blank">30-day free trial</a></p>
<div class="zemanta-pixie" style="margin-top: 10px; height: 15px;"><a class="zemanta-pixie-a" title="Enhanced by Zemanta" href="http://www.zemanta.com/"><img class="zemanta-pixie-img" style="border: none; float: right;" src="http://img.zemanta.com/zemified_e.png?x-id=653d4e98-f478-4e0d-9f18-8305499f2cbf" alt="Enhanced by Zemanta" /></a></div>
]]></content:encoded>
			<wfw:commentRss>http://blog.alertsec.com/2011/06/codemasters-attacked-by-hackers/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Fine Gael website has been Hacked and Personal Data of 2,000 Supporters were Breached</title>
		<link>http://blog.alertsec.com/2011/01/fine-gael-website-has-been-hacked-and-personal-data-of-2000-supporters-were-breached/</link>
		<comments>http://blog.alertsec.com/2011/01/fine-gael-website-has-been-hacked-and-personal-data-of-2000-supporters-were-breached/#comments</comments>
		<pubDate>Tue, 18 Jan 2011 11:33:57 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Hackers]]></category>
		<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[data breach]]></category>
		<category><![CDATA[alertsec]]></category>
		<category><![CDATA[AlertSec Xpress]]></category>
		<category><![CDATA[data]]></category>
		<category><![CDATA[Data Breaches]]></category>
		<category><![CDATA[data security]]></category>
		<category><![CDATA[finegael]]></category>
		<category><![CDATA[Information Loss]]></category>
		<category><![CDATA[Ireland]]></category>
		<category><![CDATA[Political party]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[security breach]]></category>
		<category><![CDATA[United States]]></category>
		<category><![CDATA[Wikileaks]]></category>

		<guid isPermaLink="false">http://blog.alertsec.com/?p=1680</guid>
		<description><![CDATA[When you are talking about data in IT organizations hacking attacks will continue to thrive. Again in any professional organization, the tendency of such kinds of attacks happening in real-time is very common. Through the medium of this blog, we’ve been highlighting several breach incidents which present strong warnings for organizations to enhance their mechanisms [...]]]></description>
			<content:encoded><![CDATA[<p>When you are talking about data in IT organizations hacking attacks will continue to thrive. Again in any professional organization, the tendency of such kinds of attacks happening in real-time is very common. Through the medium of this blog, we’ve been highlighting several breach incidents which present strong warnings for organizations to enhance their mechanisms for the protection against data loss incidents. One such way of ensuring the data security is through the use of <a title="Alertsec Free Trial" href="https://www.alertsec.com/order/trial/index.php?step=1" target="_blank">data encryption software</a>.</p>
<p>Today we are going to talk about Fine Gael, a political party portal and how it became the latest victim of data breach incident.</p>
<p><strong>Fine Gael website Hacked by an &#8220;Anonymous&#8221; Group</strong></p>
<div id="attachment_1686" class="wp-caption alignright" style="width: 235px"><a href="http://blog.alertsec.com/wp-content/uploads/2011/01/image.jpg"><img class="size-full wp-image-1686" title="image" src="http://blog.alertsec.com/wp-content/uploads/2011/01/image.jpg" alt="Enda Kenny" width="225" height="225" /></a><p class="wp-caption-text">Fine Gael party leader Enda Kenny</p></div>
<p>As we mentioned above, Fine Gael is the new website of an Irish political party. It has been hacked by &#8220;Anonymous&#8221;, an online hacking group. The website was launched last week and the reason of launching was to invite members of the public to share their views on policy and the future of Ireland.</p>
<p>Fine Gael has been formed in 1933 and considered as the moderate political party. On Tuesday Party replaced its old website finegael.ie with the new website finegael2011.com. This site has been hosted by the American internet firm ElectionMall Technologies which is a US firm.<br />
<strong> </strong></p>
<p><strong>Personal Data of Around 2000 Supporters were Revealed </strong></p>
<p>So how does it feel to be among those whose data is revealed? Exactly this is what happened to the supporters of Fine Gael. The hacking incident had an impact on the personal data of around 2000 supporters. Irish Central reported that the number of affected is believed to increase to 4,000. This attack took place on Sunday and immediately after the attack website was forced offline. The hacker was forwarded the personal details file to media organizations. This file was containing the IP addresses, phone numbers and e-mail addresses of approximate 2000 people.</p>
<p><strong>Why the New Hosted Website </strong><strong>was Hacked </strong></p>
<p>According to the attackers, the site was hacked because comments submitted to the site by users were being censored and forwarded around 2,000 members&#8217; details with the claim that the party was censoring comments from the public. Hackers posted a message on the Fine Gael website after removing the message posted by them. The posted message was &#8220;Nothing is safe, you put your faith in this political party and they take no measures to protect you. They offer you free speech yet they censor your voice. Wake up!&#8221;</p>
<blockquote><p>A spokesperson for Fine Gael said the attack was &#8220;assumed to be by Anonymous&#8221;, but &#8220;the link is yet to be proven&#8221;.</p></blockquote>
<p>This online &#8220;Anonymous&#8221; Group is best known for its attack on websites and has been also tried to bring down several payment sites including Mastercard.com and Visa recently to block the payments to Wikileaks.</p>
<p><strong>Action Taken By the Party</strong></p>
<p>As a follow-up activity, party has informed the people, whose data has been compromised by an email about the breach. Also warned them that the hacked data was included their personal details like names, email addresses, constituency details and phone numbers. Fine Gael contacted to the data protection commissioner “Billy Hawkes” who is investigating this case and also contacted the Garda Computer Crime Unit in relation to the attack. The FBI has also involved in this case after ElectionMall contacted the US police.</p>
<blockquote><p>According to Hawkes, party suspects that the personal data of those who posted comments or registered their details has been compromised. In a statement party said the website will be offline &#8220;while we follow-up with the appropriate authorities to resolve the matter.&#8221;</p></blockquote>
<p><strong>How Alertsec Xpress Would Have Helped</strong></p>
<p>In an incident which highlights the need of a <a href="http://www.alertsec.com/">data security</a> and recovery software, the threat could have simply been reduced to an          insurance matter by a mere investment of $13/month. The    information       would have been secure with no loss what so ever. That    is  certainly a      small price to pay compared to what can happen  if   you  lose  confidential     or sensitive data.  <a href="http://www.alertsec.com/index.php?page=ov_about_alertsec">Alertsec Xpress</a> offers a very good and easy-to-use laptop security service that          includes more than the traditional software licensing model. Feel free          to subscribe for your personal <a href="https://www.alertsec.com/order/trial/index.php?step=1">30-day free trial</a>.</p>
<h6 class="zemanta-related-title" style="font-size: 1em;">Related articles</h6>
<ul class="zemanta-article-ul">
<li class="zemanta-article-ul-li"><a href="http://r.zemanta.com/?u=http%3A//www.guardian.co.uk/technology/2011/jan/10/fine-gael-website-anonymous-hackers&amp;a=32354537&amp;rid=f5647038-34af-4767-8915-3f3599ba2d49&amp;e=fe1f145bffffba5231b7bcd7666152fd">Fine Gael website targeted by Anonymous hackers</a> (guardian.co.uk)</li>
<li class="zemanta-article-ul-li"><a href="http://www.bbc.co.uk/go/rss/int/news/-/news/technology-12159695">Irish site &#8216;hacked by activists&#8217;</a> (bbc.co.uk)</li>
<li class="zemanta-article-ul-li"><a href="http://www.politics.ie/fine-gael/147957-fine-gael-site-hacked-seconds-default-passwords-unchanged-hacked-not-buying-irish.html">FG site hacked in seconds &#8211; default passwords unchanged. Hacked for not buying Irish.</a> (politics.ie)</li>
<li class="zemanta-article-ul-li"><a href="http://www.politics.ie/fine-gael/147669-fine-gaels-new-website-appears-have-been-hacked.html">Fine Gael&#8217;s new website appears to have been hacked</a> (politics.ie)</li>
<li class="zemanta-article-ul-li"><a href="http://sociable.co/2011/01/10/fine-gael%25e2%2580%2599s-website-hacked/">Fine Gael&#8217;s website hacked</a> (sociable.co)</li>
</ul>
<div class="zemanta-pixie" style="margin-top: 10px; height: 15px;"><a class="zemanta-pixie-a" title="Enhanced by Zemanta" href="http://www.zemanta.com/"><img class="zemanta-pixie-img" style="border: medium none; float: right;" src="http://img.zemanta.com/zemified_e.png?x-id=f5647038-34af-4767-8915-3f3599ba2d49" alt="Enhanced by Zemanta" /></a><span class="zem-script more-related pretty-attribution"><script src="http://static.zemanta.com/readside/loader.js" type="text/javascript"></script></span></div>
]]></content:encoded>
			<wfw:commentRss>http://blog.alertsec.com/2011/01/fine-gael-website-has-been-hacked-and-personal-data-of-2000-supporters-were-breached/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
	</channel>
</rss>

