Stories
Slash Boxes
Comments

SoylentNews is people

Hackers Went Undetected in Citrix's Internal Network for Six Months

posted by Fnord666 on Friday May 03 2019, @02:16PM   Printer-friendly
from the where's-waldo dept.

martyb writes:

Hackers Went Undetected in Citrix's Internal Network for Six Months:

Hackers gained access to technology giant Citrix's networks six months before they were discovered, the company has confirmed.

In a letter to California's attorney general, the virtualization and security software maker said the hackers had "intermittent access" to its internal network from October 13, 2018 until March 8, 2019, two days after the FBI alerted the company to the breach.

Citrix said the hackers "removed files from our systems, which may have included files containing information about our current and former employees and, in limited cases, information about beneficiaries and/or dependents."

Initially the company said hackers stole business documents. Now it's saying the stolen information may have included names, Social Security numbers and financial information.

Citrix is big in digital workspaces, networking, and analytics. I imagine this breach caused many VeryNotGood days for a large number of company people.

Were you affected?

Original Submission

 
This discussion has been archived. No new comments can be posted.
Hackers Went Undetected in Citrix's Internal Network for Six Months | Log In/Create an Account | Top | 14 comments | Search Discussion
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.

  • (Score: 1, Insightful) by Anonymous Coward on Friday May 03 2019, @03:54PM (2 children)

    by Anonymous Coward on Friday May 03 2019, @03:54PM (#838437)

    Instead of just accepting risk why not eliminate it?

    It's really quite simple. If eliminating some risk factor costs more than the possible consequences of accepting that risk factor, the rational decision is to accept the risk.

    The consequences of this data breach are probably that a bunch of people had, or will have in the near future, a pretty stressful week. It will be business as usual before long and this issue will be forgotten.

    Starting Score:    0  points
    Moderation   +1  
       Insightful=1, Total=1
    Extra 'Insightful' Modifier   0  
    Total Score:   1  

  • (Score: 2) by DeathMonkey on Friday May 03 2019, @06:46PM (1 child)

    by DeathMonkey (1380) on Friday May 03 2019, @06:46PM (#838518) Journal

    If eliminating some risk factor costs more than the possible consequences of accepting that risk factor, the rational decision is to accept the risk.

    Which is why we use regulation to increase the possible consequences.

    • (Score: 2) by RS3 on Friday May 03 2019, @08:34PM

      by RS3 (6367) on Friday May 03 2019, @08:34PM (#838548)

      Which is why we use regulation to increase the possible consequences.

      I agree, but are there many such regulations? Perhaps you're in Europe or somewhere more progressive. Here in the US they tend to wait until people die before laws are passed. But I don't want to be cynical- governments are finally becoming more aware of the criticality of data and privacy protection.