Re: Adobe: Important Customer Security Announcement

[Paul Ferguson <fergdawgster () mykolab com>]

I'm guessing you haven't seen this:

https://krebsonsecurity.com/2013/10/adobe-to-announce-source-code-customer-data-breach/

- ferg

On 10/3/2013 3:15 PM, Jeffrey Walton wrote:

> Sigh....
>
> It would be nice if there was a full accounting of what precisely was
> egressed. I wonder if the key to the data was egressed from the file
> system with the rest of the data. Or maybe the bad guy decrypted the
> data first before egress.
>
> http://blogs.adobe.com/conversations/2013/10/important-customer-security-announcement.html
>
> ... Our investigation currently indicates that the attackers accessed
> Adobe customer IDs and encrypted passwords on our systems. We also
> believe the attackers removed from our systems certain information
> relating to 2.9 million Adobe customers, including customer names,
> encrypted credit or debit card numbers, expiration dates, and other
> information relating to customer orders....
> _______________________________________________
> Fun and Misc security discussion for OT posts.
> https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
> Note: funsec is a public and open mailing list.


--
Paul Ferguson
Vice President, Threat Intelligence
Internet Identity, Tacoma, Washington  USA
IID --> "Connect and Collaborate" --> www.internetidentity.com
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.