Cyber Risks · Krebs on Security

Adobe To Announce Source Code, Customer Data Breach

Summary: Adobe confirmed hackers broke into its network and stole source code for an undetermined number of software titles, including ColdFusion and possibly Acrobat, along with credit card records on approximately 2.9 million customers and login data for an undetermined number of user accounts. Adobe believes the attackers accessed a source code repository in mid-August 2013 after breaking into a portion of its network that handled customer credit card transactions, and said the stolen card numbers were encrypted and it does not believe decrypted numbers left its network.

What's compelling: The same attackers are believed to have hit LexisNexis, Dun & Bradstreet and Kroll, and a 40 GB source code trove was found on their server - so the theft here is code, including what appears to be unreleased Acrobat components, not just customer records. Adobe's CSO said the company is still at the brainstorming phase on how to assure product integrity, which leaves every organization running ColdFusion to weigh its own exposure.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related