Saturday, April 9, 2011

Hackers attack Epsilon database, phishing spree anticipated

Epsilon, a major Internet marketing concern, last week experienced a hack of its client’s consumer database. Millions of customer names and emails were stolen. The Epsilon database involves millions of customers of banks with charge cards, as well as those of large retailers. Consumers of Epsilon clients began receiving warnings to expect phishing scams in their inboxes.

Names at Epsilon hacked

The theft of millions of names and emails in the Epsilon database hack could possibly be the biggest data security breach in United States history. Friday, Epsilon declared that customer files were hacked meaning email addresses and other information at web sites might have been stolen as Epsilon sends over 40 billion marketing emails for 2,500 corporations every year.

At least a dozen corporations were impacted. Phishing attacks might start hitting customers at banks such as Capital One, Barclays Bank, United States Bancorp, Citigroup and J.P. Morgan Chase. Customers who have done business with retailers such as HSN, Best Buy, TiVo, Walgreens and Kroger have also been exposed. Students should worry as about 5,900 colleges and universities were in the College Board database, the business that organizes the SAT. This information might also have been stolen.

Picking out a con before it gets you

The Epsilon database hack stole several names and emails. Scam was, more than likely, the reason of this. Account holders could be targeted with this "phishing" con, which may be very effective. The phishing email tries to trick them into logging in at a fraudulent site created to look like the real site, which captures the login information and gives hackers access to the account. The hacker can find more information on Facebook about an individual after a name and email address is found. This will make the email seem real. Several times, a phishing scam will say that an account will be closed if information is not updated or ask a person to update charge card information. Since the account is compromised, phishing scams will ask for account information.

A new record for stealing data

Although Epsilon said the database hack was limited to consumer names and email addresses, the company hasn’t yet made clear how many customers or students have been exposed. In addition to the Epsilon clients mentioned above, others contain Verizon Communications, Hilton Hotels, Kraft Foods and AstraZeneca. The biggest attack recognized in United States history for identity theft is currently the Heartland Payment Systems hack, which the Epsilon database hack may have surpassed. A 20 year prison sentence was given to cyber-criminal Albert Gonzalez. He got to the Heartland Payment Systems and stole over 40 million card numbers to use for his own personal use.

Citations

Associated Press

finance.yahoo.com/news/Banks-creditcard-issuers-warn-apf-754015157.html?x=0&sec=topStories&pos=main&asset=&ccode=

MSN Money

money.msn.com/identity-theft/news.aspx?feed=OBR&date=20110403&id=13261200

Computer world

computerworld.com/s/article/print/9215443/Update_Bank_customers_warned_after_breach_at_Epsilon_marketing_firm?taxonomyName=Security&taxonomyId=17

Microsoft

microsoft.com/security/online-privacy/phishing-symptoms.aspx



No comments: