Russian crime ring in massive Internet data heist

[Hum]

A Russian crime ring has got its hands on more than a billion stolen Internet credentials, according to a New York Times report.

Citing records discovered by Hold Security, the New York Times reported on Tuesday that the stolen credentials include 1.2 billion password and username combinations and more than 500 million email addresses.

Research specialist Hold Security, which has a strong track record of uncovering data breaches, says that the stolen data was gathered from 420,000 websites. Organizations affected range from household names to small Internet sites, it said.

Citing nondisclosure agreements and a reluctance to identify companies still at risk, Hold Security would not name the victims of the hack that resulted in more than a billion stolen Internet credentials.

more

[Hum]

1 in 7 people on Earth affected is amazing to think about.

[goretsky Supervisor]

Hello,

 

Well, it is likely there is some duplication; if you read some of the articles about this, it basically sounds like the criminal gang behind this installed malware that performed SQL injections as infected users logged into various web sites.  So, it is more likely an infected individual had multiple services breaches.

 

I guess we will have to wait until all of the affected companies have signed up for Hold Security's service and fixed the SQL injection issues on their web site in order to know more.

 

Regards,

 

Aryeh Goretsky