BreachBytes

As you may have read in “About BreachBytes” over the past 6 months we have been posting links to articles on the Packet Analytics web site that have to do in one way or another with Breaches and Incident Response. Since we have converted BreachBytes from a list of links on our web site to a full blog I thought we should post the links on the BreachBytes Blog.

SourceForge hacked, but not to worry(?)
“We played a game of cat and mouse with a “security enthusiast” from Europe yesterday. :)” 12/8/2007

DOE Lab Hacked
Oak Ridge National Laboratory, a U.S. Department of Energy facility, said on Thursday that its computer network had been comprised by a spear-phishing attack. 12/7/2007

UK Hosting Service Shuts Down Websites After Database Breach
One of the UK’s largest hosting providers has pulled the plug on hundreds of Websites after attackers tried to use stolen data. 12/6/2007

Report Details Real Costs of Data Breaches
The study found that data breach incidents cost companies $197 per compromised customer record in 2007, compared to $182 in 2006. For a financial services firm, the cost was even more expensive at $239 per lost record. Most of the cost, $128 out of the $197, is from lost business and having to acquire new customers. 11/28/2007

Security Sweep Finds Retailers Wi-Fi Networks At Risk
2,500 wireless devices were discovered by wireless monitors, and 85 percent of the devices could be compromised in one way or another due to flaws in security configurations. 11/16/2007

TJX’s Projected Breach Costs Increase to $216M
…in its Nov. 13 earnings announcement, TJX increased its estimate of pre-tax charges for the world’s worst credit card data breach to $216 million. Back in August, it had projected only a $168 million pre-tax hit. 11/14/2007

Part II: How well are we protecting ourselves?
Internet crime’s total yearly cost to U.S. businesses, including indirect expenses like paying employees to repair hacked systems, has risen as high as $67 billion, according to an FBI. 11/12/2007

Cybercrime: How online crooks put us all at risk
During the past few years, a professional class bent on stealthy online fraud has transformed Internet crime, rendering obsolete the hobbyist hackers who sought fun and fame. 11/11/07

Phishing-based breach of salesforce.com customer data is more evidence of industry’s need to act on spam. Now.
11/6/07

Log Analysis Across System Boundaries for Security, Compliance and Operations
Of course, simply generating and collecting the logs is only half the battle. Being able to quickly search and report on log data in order to detect, manage, or even predict, security threats and to stay on top of compliance requirements is the other half. 11/6/07

More Than One-Third of Employees Admit to Violating Their Company’s IT Policies
10/31/07

TJX Breach Was Twice as Bad as First Reported
The largest digital data theft ever recorded was bigger than originally thought. 10/25/07

IM security breach costs rise
Instant messaging (IM) security breach costs are growing as employees continue to download applications onto their work PCs, a new survey has revealed. 10/20/07

Fasthosts suffers security breach
Web-hosting company Fasthosts has warned its customers to change all their passwords after being targeted by hackers. 10/19/07

Gartner Says the Cost of a Sensitive Data Breach Will Increase 20 Percent per Year
Financially motivated targeted attacks are becoming more prevalent and new vulnerabilities continue to be reported… 10/08/07

UK group pushes for stiff data security breach laws
A trade association representing hundreds of technology firms in the UK is pushing hard for lawmakers there to develop a breach notification law and rigorous data protection rules. 10/08/07

CA exec urges Asia to strengthen data-breach laws
In Japan, companies pay for security breaches in the form of an ‘apology fine,’ sometimes per user-account affected, which can amount to millions of dollars. 10/05/07

Unisys said to cover up DHS network breach
In 2006, hackers broke into Department of Homeland Security computers, copying and sending out data for hours at a time—as long as five hours in one case. 09/26/07

TJX Settles Lawsuits, Offers Discount Days
After private credit card data from some 46 million consumers fell into the hands of cyber-thieves in the largest retail data breach ever… 09/24/07

Report: TD Ameritrade data leak started in 2005
One thing is clear: This incident is a definite black eye for a company that had a relatively pristine IT image until now. 09/20/07

‘Coordinated’ Hackers Steal Internet Retailer Customer Credit Cards
Vertical Web Media’s president says hackers breached the company’s network even though patches were up-to-date and defenses were in place. 09/19/07

Ameritrade leak looks to have started in late ‘05, much earlier than reported
09/19/07

Hackers infiltrate TD Ameritrade client database
09/15/07

Beyond the firewall: Securing your internal network
98 percent of companies have firewall defenses in place and 97 percent have anti-virus software. Yet 52 percent of companies reported some type of security breach. 09/05/07

Hackers Also Hit USAJobs.gov
08/31/07

Millions of users’ data may have been stolen
Iannuzzi (Monster’s CEO) said: “I wish I could say…there will be absolutely no way that the Monster site can be compromised. I cannot ever make that promise, and no Internet company can.” 08/29/07

VARs See Lesson In Monster.com Breach
08/24/07

The Meaning Of TJX’s $168 Million Data Breach Cost
08/15/07

Western Union Breach
07/17/07

Breach, undetected since ‘05, exposes data on Kingston customers
07/17/07

The Rise of Network Forensics?
Blog Post: “Network Forensics” is going to quickly become the next “big thing”(TM) in the digital forensics discipline. 07/14/07

2.3M Records Containing Credit Card, Bank Account Information Stolen, Financial Processing Company Says
07/03/07

This entry was posted on Monday, December 17th, 2007 at 4:10 pm and is filed under Breaches, Links to articles. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.