Stories
Slash Boxes
Comments

SoylentNews is people

posted by Fnord666 on Tuesday September 25 2018, @10:47PM   Printer-friendly
from the easy-pickings dept.

Servers that once belonged to defunct Canadian gadget retailer NCIX turned up on the second-hand market without being wiped – and their customer data sold overseas – it is claimed.

Those boxes, allegedly, stored plaintext credit card data for approximately 260,000 people, and purchase records for 385,000 shoppers.

Travis Doering, of infosec shop Privacy Fly, claimed he discovered the security cockup in the simplest way possible: he spotted the machines advertised on Craigslist, answered the ad, and inspected what was on offer.

According to the security consultant in a writeup this week, the hardware haul turned out to be 18 Dell Poweredge boxes from NCIX's server farm, plus storage kit, and 300 desktop machines. They were seized by the retailer's landlords after NCIX failed to pay CA$150,000 in rent, and sold off via auction to another person, who then apparently hawked the equipment to interested buyers via Craigslist last month.

https://www.theregister.co.uk/2018/09/21/ncix_servers_sold/

https://www.privacyfly.com/articles/ncix_breach/


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 2) by urza9814 on Wednesday September 26 2018, @06:37PM

    by urza9814 (3954) on Wednesday September 26 2018, @06:37PM (#740375) Journal

    Like the Equifax breach? What ever happened about that again?

    Oh, right...nothing.

    Starting Score:    1  point
    Karma-Bonus Modifier   +1  

    Total Score:   2