Cyber Risks · Krebs on Security

Ad Network Sizmek Probes Account Breach

Summary: Online advertising firm Sizmek Inc. said it is investigating a security incident in which a hacker offered access to a user account on a Russian-language cybercrime forum, with a starting bid of $800, for its Sizmek Advertising Suite platform. General counsel George Pappachen said the account was a regular user account, not the administrator account the seller claimed, but acknowledged it could add or modify advertising creatives, and Sizmek forced a password reset on all internal employees ("a few hundred") while scrubbing its SAS user database for departed employees, partners and vendors.

What's compelling: Screenshots of the panel shared by the seller showed accounts tied to current or former Sizmek employees and brands including Fox Broadcasting, Gannett, Hearst Digital, Kohler and Pandora - and Pappachen said the legacy systems involved "probably did not have" mobile-based multi-factor authentication.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related