Whoops. The data broker giant LexisNexis has suffered another data breach.
Uncategorized
16
Posts
12
Posters
0
Views
-
Whoops. The data broker giant LexisNexis has suffered another data breach. LN says the data taken was no big deal. The group claiming credit for the breach claims otherwise, of course.
This brings back memories of previous breach stories. One of my first big scoops that made the WaPo dead tree edition's front page involved a breach at LexisNexis in 2005 that exposed >300k consumer records. That breach was from a group of 15-18y/os in the US who also social engineered T-Mobile into giving them access to Paris Hilton's cell phone and the nudes w/in.
In 2013, I published a scoop about a LexisNexis breach that came from group of criminal hackers who had seized control over ssndob[.]ru, then the largest ID theft service in the underground. In that months-long investigation, we found the hackers had installed backdoors on servers at LexisNexis, Dun & Bradstreet, and Kroll and were using them as part of a small and custom data broker botnet.
https://krebsonsecurity.com/2013/09/data-broker-giants-hacked-by-id-theft-service/
-
Whoops. The data broker giant LexisNexis has suffered another data breach. LN says the data taken was no big deal. The group claiming credit for the breach claims otherwise, of course.
This brings back memories of previous breach stories. One of my first big scoops that made the WaPo dead tree edition's front page involved a breach at LexisNexis in 2005 that exposed >300k consumer records. That breach was from a group of 15-18y/os in the US who also social engineered T-Mobile into giving them access to Paris Hilton's cell phone and the nudes w/in.
In 2013, I published a scoop about a LexisNexis breach that came from group of criminal hackers who had seized control over ssndob[.]ru, then the largest ID theft service in the underground. In that months-long investigation, we found the hackers had installed backdoors on servers at LexisNexis, Dun & Bradstreet, and Kroll and were using them as part of a small and custom data broker botnet.
https://krebsonsecurity.com/2013/09/data-broker-giants-hacked-by-id-theft-service/
> American data analytics company #LexisNexis Legal & Professional has confirmed to #BleepingComputer that #hackers breached its servers and accessed some customer and business information.
> The company's data breach confirmation comes as a threat actor named #FulcrumSec leaked 2GB of files on various underground forums and sites.
> LexisNexis L&P is a global provider of legal, regulatory, and business information, research tools, and analytics used by lawyers, corporations, governments, and academic institutions in more than 150 countries worldwide.
-
Whoops. The data broker giant LexisNexis has suffered another data breach. LN says the data taken was no big deal. The group claiming credit for the breach claims otherwise, of course.
This brings back memories of previous breach stories. One of my first big scoops that made the WaPo dead tree edition's front page involved a breach at LexisNexis in 2005 that exposed >300k consumer records. That breach was from a group of 15-18y/os in the US who also social engineered T-Mobile into giving them access to Paris Hilton's cell phone and the nudes w/in.
In 2013, I published a scoop about a LexisNexis breach that came from group of criminal hackers who had seized control over ssndob[.]ru, then the largest ID theft service in the underground. In that months-long investigation, we found the hackers had installed backdoors on servers at LexisNexis, Dun & Bradstreet, and Kroll and were using them as part of a small and custom data broker botnet.
https://krebsonsecurity.com/2013/09/data-broker-giants-hacked-by-id-theft-service/
@briankrebs Long-time mantra of mine: data that doesn’t exist can’t be stolen.
-
@briankrebs Long-time mantra of mine: data that doesn’t exist can’t be stolen.
@SteveBellovin Yes! Or as I like to say, you don't have to protect what you don't collect.
-
Whoops. The data broker giant LexisNexis has suffered another data breach. LN says the data taken was no big deal. The group claiming credit for the breach claims otherwise, of course.
This brings back memories of previous breach stories. One of my first big scoops that made the WaPo dead tree edition's front page involved a breach at LexisNexis in 2005 that exposed >300k consumer records. That breach was from a group of 15-18y/os in the US who also social engineered T-Mobile into giving them access to Paris Hilton's cell phone and the nudes w/in.
In 2013, I published a scoop about a LexisNexis breach that came from group of criminal hackers who had seized control over ssndob[.]ru, then the largest ID theft service in the underground. In that months-long investigation, we found the hackers had installed backdoors on servers at LexisNexis, Dun & Bradstreet, and Kroll and were using them as part of a small and custom data broker botnet.
https://krebsonsecurity.com/2013/09/data-broker-giants-hacked-by-id-theft-service/
@briankrebs Perhaps the data breeches all need catchier names, like hurricanes and cyclones, for easy reference. <sarcasm>
-
@SteveBellovin Yes! Or as I like to say, you don't have to protect what you don't collect.
gee, was just posting about that in relation to the ICE use of ad broker data. if you don't collect that data, it can't be illegally misused.
-
> American data analytics company #LexisNexis Legal & Professional has confirmed to #BleepingComputer that #hackers breached its servers and accessed some customer and business information.
> The company's data breach confirmation comes as a threat actor named #FulcrumSec leaked 2GB of files on various underground forums and sites.
> LexisNexis L&P is a global provider of legal, regulatory, and business information, research tools, and analytics used by lawyers, corporations, governments, and academic institutions in more than 150 countries worldwide.
LexisNexis also does data and background checks, which generates access to a boatload of private information.
-
gee, was just posting about that in relation to the ICE use of ad broker data. if you don't collect that data, it can't be illegally misused.
@paul_ipv6
So where’s the national privacy legislation, guys? Has there been any good draft policy written already that we can retitle and relaunch? Can we get all the big privacy orgs to back it? Publicize it maybe? Memeable? I’m tired of constantly being a victim and nobody ever fighting back for our right to not be snooped on and surveilled, and then to have our snooped-on data stolen. I’m in so many dark web dumps I don’t even look anymore. It just never seems to end and I don’t see how we are going to stand up to the lobbyists without seriously organizing on the privacy agenda. It’s just like microplastics. It’s toxic and everyone agrees that we need to get it out of our environment but nobody is talking about eliminating the problem at the source.
@briankrebs @SteveBellovin -
@paul_ipv6
So where’s the national privacy legislation, guys? Has there been any good draft policy written already that we can retitle and relaunch? Can we get all the big privacy orgs to back it? Publicize it maybe? Memeable? I’m tired of constantly being a victim and nobody ever fighting back for our right to not be snooped on and surveilled, and then to have our snooped-on data stolen. I’m in so many dark web dumps I don’t even look anymore. It just never seems to end and I don’t see how we are going to stand up to the lobbyists without seriously organizing on the privacy agenda. It’s just like microplastics. It’s toxic and everyone agrees that we need to get it out of our environment but nobody is talking about eliminating the problem at the source.
@briankrebs @SteveBellovin@suzannealdrich @paul_ipv6 @briankrebs There are several good state laws to copy, such as California's and Colorado's, and of course there's the GDPR. There was a decent Federal bill a few years ago but Pelosi killed it, because it preempted stronger state laws like California's.
Industry, of course, doesn't want any of this. "Data is the new oil!" No (and I wish I'd thought up this line, and I don't know who did), it's the new plutonium—small amounts are very toxic, and too much concentrated in one place can have very bad consequences. But if there are going to be privacy laws, they want one law in the US, not 50. In the meantime, they're pushing (and drafting) weak state privacy laws, some of which have been enacted.
Of course, I'll believe that things like the GDPR actually work when Facebook et al. have to pull out of the EU. I do, though, suspect that we're thinking about privacy regulation incorrectly. The paradigm of notice and consent is >50 years old and it doesn't work. My thoughts on that are at https://gwjolt.org/files/volume_1/GW_JOLT_1_1_Bellovin.pdf. -
Whoops. The data broker giant LexisNexis has suffered another data breach. LN says the data taken was no big deal. The group claiming credit for the breach claims otherwise, of course.
This brings back memories of previous breach stories. One of my first big scoops that made the WaPo dead tree edition's front page involved a breach at LexisNexis in 2005 that exposed >300k consumer records. That breach was from a group of 15-18y/os in the US who also social engineered T-Mobile into giving them access to Paris Hilton's cell phone and the nudes w/in.
In 2013, I published a scoop about a LexisNexis breach that came from group of criminal hackers who had seized control over ssndob[.]ru, then the largest ID theft service in the underground. In that months-long investigation, we found the hackers had installed backdoors on servers at LexisNexis, Dun & Bradstreet, and Kroll and were using them as part of a small and custom data broker botnet.
https://krebsonsecurity.com/2013/09/data-broker-giants-hacked-by-id-theft-service/
That 2005 data breech was a big headache for me Wells Fargo who was my visa provider at the time called me and asked if I was in Connecticut buying stereo equipment.
I was not so they cancelled the card and we though all was well.Over the course of the next few weeks multiple quick and instant credit applications were approved . Best was a vehicle dealer in Puerto Rico. Someone pretending to be me bought a car down there
Somehow he got my home phone number and called. I told him sorry when he kept asking if I was sure I did not buy a vehicle. I asked him can't he repossess it and he responded it probably is already in pieces by now.
I still have my credit locked.
-
Whoops. The data broker giant LexisNexis has suffered another data breach. LN says the data taken was no big deal. The group claiming credit for the breach claims otherwise, of course.
This brings back memories of previous breach stories. One of my first big scoops that made the WaPo dead tree edition's front page involved a breach at LexisNexis in 2005 that exposed >300k consumer records. That breach was from a group of 15-18y/os in the US who also social engineered T-Mobile into giving them access to Paris Hilton's cell phone and the nudes w/in.
In 2013, I published a scoop about a LexisNexis breach that came from group of criminal hackers who had seized control over ssndob[.]ru, then the largest ID theft service in the underground. In that months-long investigation, we found the hackers had installed backdoors on servers at LexisNexis, Dun & Bradstreet, and Kroll and were using them as part of a small and custom data broker botnet.
https://krebsonsecurity.com/2013/09/data-broker-giants-hacked-by-id-theft-service/
Oh yikes.
Thomson Reuters (major product Westlaw which competes with LexisNexis) has CLEAR, wonder how often that's been breached.
-
@paul_ipv6
So where’s the national privacy legislation, guys? Has there been any good draft policy written already that we can retitle and relaunch? Can we get all the big privacy orgs to back it? Publicize it maybe? Memeable? I’m tired of constantly being a victim and nobody ever fighting back for our right to not be snooped on and surveilled, and then to have our snooped-on data stolen. I’m in so many dark web dumps I don’t even look anymore. It just never seems to end and I don’t see how we are going to stand up to the lobbyists without seriously organizing on the privacy agenda. It’s just like microplastics. It’s toxic and everyone agrees that we need to get it out of our environment but nobody is talking about eliminating the problem at the source.
@briankrebs @SteveBellovin@suzannealdrich @paul_ipv6 @briankrebs @SteveBellovin My wife took a small step in fighting back - she has a set of false names, dates, and places that she uses. A few years back the WSJ did a front page article on her doing this.
I have a copy of the 1974 HEW report on computers/privacy. It's concerns about data linking have come true - and have even exceeded what was imagined. (And there was no lack of imagination - for instance Lance Hoffman's article from that era about pulling personally identifiable information from seemingly anonymous databases.)
-
@suzannealdrich @paul_ipv6 @briankrebs @SteveBellovin My wife took a small step in fighting back - she has a set of false names, dates, and places that she uses. A few years back the WSJ did a front page article on her doing this.
I have a copy of the 1974 HEW report on computers/privacy. It's concerns about data linking have come true - and have even exceeded what was imagined. (And there was no lack of imagination - for instance Lance Hoffman's article from that era about pulling personally identifiable information from seemingly anonymous databases.)
@karlauerbach @suzannealdrich @paul_ipv6 @briankrebs So much was known 60 years ago. https://www.cs.columbia.edu/~smb/talks/vassar-privacy.pdf summarizes some of it; some of my legal writing has citations to even more sources. The first privacy law in the modern world was in Hesse, in 1970; the phrase "data shadow" was coined no later than 1973 by Kerstin Anér, a member of the Swedish parliament. We should not be where we are today! (Credit reports, though, go way back, and originally consisted of gossip collected from servants about their employers.)
-
@karlauerbach @suzannealdrich @paul_ipv6 @briankrebs So much was known 60 years ago. https://www.cs.columbia.edu/~smb/talks/vassar-privacy.pdf summarizes some of it; some of my legal writing has citations to even more sources. The first privacy law in the modern world was in Hesse, in 1970; the phrase "data shadow" was coined no later than 1973 by Kerstin Anér, a member of the Swedish parliament. We should not be where we are today! (Credit reports, though, go way back, and originally consisted of gossip collected from servants about their employers.)
@karlauerbach @suzannealdrich @paul_ipv6 @briankrebs Here's a great history source: https://www.europarl.europa.eu/RegData/etudes/BRIE/2020/651923/EPRS_BRI(2020)651923_EN.pdf
-
Whoops. The data broker giant LexisNexis has suffered another data breach. LN says the data taken was no big deal. The group claiming credit for the breach claims otherwise, of course.
This brings back memories of previous breach stories. One of my first big scoops that made the WaPo dead tree edition's front page involved a breach at LexisNexis in 2005 that exposed >300k consumer records. That breach was from a group of 15-18y/os in the US who also social engineered T-Mobile into giving them access to Paris Hilton's cell phone and the nudes w/in.
In 2013, I published a scoop about a LexisNexis breach that came from group of criminal hackers who had seized control over ssndob[.]ru, then the largest ID theft service in the underground. In that months-long investigation, we found the hackers had installed backdoors on servers at LexisNexis, Dun & Bradstreet, and Kroll and were using them as part of a small and custom data broker botnet.
https://krebsonsecurity.com/2013/09/data-broker-giants-hacked-by-id-theft-service/
And you get 2 years of free credit monitoring, if you update your PII.
We will claim we were hacked later after we sold the data.
Come back in 2 years. Rinse, lather, repeat.
-
@karlauerbach @suzannealdrich @paul_ipv6 @briankrebs Here's a great history source: https://www.europarl.europa.eu/RegData/etudes/BRIE/2020/651923/EPRS_BRI(2020)651923_EN.pdf
@SteveBellovin @karlauerbach @suzannealdrich @paul_ipv6 @briankrebs I usd to work for Lexis Nexis (Quicklaw in Canada, the real part) and we called the company "Monica", after Monica DeVertebrae
-
undefined oblomov@sociale.network shared this topic
Gli ultimi otto messaggi ricevuti dalla Federazione
-
-
La rivoluzione mangia i propri figli
Mps, Lovaglio fuori dalla lista. Cda nel pomeriggio https://www.ilsole24ore.com/art/mps-lovaglio-fuori-lista-cda-pomeriggio-AI4RJHlB
-
-
-
Webview Kiosk: gestire dispositivi Android in modalità dedicata a tutto schermo
Se avete bisogno di trasformare un Android in un terminale dedicato a una singola funzione web, Webview Kiosk potrebbe fare al caso vostro!
https://www.lealternative.net/2026/03/04/webview-kiosk-gestire-dispositivi-android-in-modalita-dedicata-a-tutto-schermo/
-
Vorrei un'unica Olimpiade, insieme olimpica e paralimpica, aperta e inclusiva davvero.
Ep. 143 – Inaccessibilità delle paralimpiadi e un pizzico di sessismo a Sanremo https://www.ilpost.it/podcasts/amare-parole/ep-143-inaccessibilita-delle-paralimpiadi-e-un-pizzico-di-sessismo-a-sanremo
-
Imagine a newsletter subscription that includes also a yearly book. Something you could lick (not sure it'll taste good though, but you could!) or use as a pillow under your laptop, or take in bath with you. You know, a nicely offset printed object, fully made in Japan.
From today, ALL MundoMendo members get the books (a 30 euro value) for free.
-
@bmoreinis @mttaggart @catsalad Luckily there are more Linux distros out there than Ubuntu that will not so easily roll over to the amerikan bullshit
Ubuntu has not been the best desktop option for a long time so if they want to be complicit then people will go elsewhere
