Forest Global Training Partners

Cyber Risks · Krebs on Security

Hackers May Have Unearthed Dirt on Stanford

Summary: In early 2008, Eastern European hackers breached the Stanford Group's network by exploiting vulnerabilities in its Web servers and databases, stealing credentials from an internal network administrator and downloading user names and password hashes for more than 1,000 employees across Stanford Financial, Stanford Group, Stanford Trust, and Stanford International Bank Ltd. The stolen files included ownership and balance information for tens of thousands of Bank of Antigua customer accounts, stored in plain text for at least several weeks on an attacker-controlled website, and a fraud investigator forwarded the material to the FBI shortly after discovering it.

Key Takeaway: More than a thousand accounts carried balances between $100,000 and $900,000, and nearly all accounts above $1 million belonged to a single entity named "Kadima Panamena" - a concentration a security leader should weigh against the fact that the data sat unencrypted on an attacker's site for weeks before anyone reported it.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related