| Title | NCIX Data Breach | |
| Date | Tuesday September 25 2018, @10:47PM | |
| Author | Fnord666 | |
| Topic | ||
| from the easy-pickings dept. | ||
Servers that once belonged to defunct Canadian gadget retailer NCIX turned up on the second-hand market without being wiped – and their customer data sold overseas – it is claimed.
Those boxes, allegedly, stored plaintext credit card data for approximately 260,000 people, and purchase records for 385,000 shoppers.
Travis Doering, of infosec shop Privacy Fly, claimed he discovered the security cockup in the simplest way possible: he spotted the machines advertised on Craigslist, answered the ad, and inspected what was on offer.
According to the security consultant in a writeup this week, the hardware haul turned out to be 18 Dell Poweredge boxes from NCIX's server farm, plus storage kit, and 300 desktop machines. They were seized by the retailer's landlords after NCIX failed to pay CA$150,000 in rent, and sold off via auction to another person, who then apparently hawked the equipment to interested buyers via Craigslist last month.
https://www.theregister.co.uk/2018/09/21/ncix_servers_sold/
https://www.privacyfly.com/articles/ncix_breach/
| Links |
printed from SoylentNews, NCIX Data Breach on 2026-03-13 17:02:20