Ads by TechWords

See your link here
Subscribe to our e-mail newsletters
For more info on a specific newsletter, click the title. Details will be displayed in a new window.
Security
Computerworld Daily News (First Look and Wrap-Up)
Computerworld Blogs Newsletter
The Weekly Top 10
More E-Mail Newsletters 
 

Hackers breach LexisNexis, grab info on 32,000 people

They stole passwords, names, addresses, Social Security numbers and driver's license numbers

March 9, 2005 12:00 PM ET

IDG News Service - Hackers have compromised databases belonging to LexisNexis and stolen information on at least 32,000 people, according to a statement today from LexisNexis' parent company, Reed Elsevier PLC.
The hackers stole passwords, names, addresses, Social Security numbers and driver's license numbers of legitimate customers of the company's Seisint division. Seisint collects data on individuals that is used by law enforcement agencies and private companies for debt recovery, fraud detection and other services.
LexisNexis identified the incidents in a review of security procedures and warned that there may be more incidents of data theft, Reed Elsevier said. The incident is eerily familiar to recent revelations about similar compromises at Seisint competitor ChoicePoint Inc., which acknowledged last month that hackers had access to data on 145,000 people (see story).
Reed Elsevier didn't immediately respond to requests for comment.
LexisNexis, which acquired Boca Raton, Fla.-based Seisint Inc. in September for $775 million, expressed regret for the incident and said it is notifying the individuals whose information may have been accessed and will provide them with credit-monitoring services.
The company also said it notified law enforcement officials and is assisting with investigations of the fraudulent account access.
Like ChoicePoint, Seisint maintains a massive database of public and private information on individuals, including Social Security numbers, credit histories and criminal records. Seisint made the news in recent years as the data source behind the Multistate Anti-Terrorism Information Exchange, or MATRIX, system, a program to bring together criminal and public records from participating U.S. states.
Bill Shrewsbury, a vice president at Seisint, said that identity thieves used a different approach to breach the company's database than what was used to get ChoicePoint's data. But he declined to elaborate.
LexisNexis said it is taking actions to improve its ID and password administration security, as well as customer screening.
The incident is the latest in a series of revelations about consumer data being leaked or lost. Those incidents include the ChoicePoint compromise and Bank of America Corp.'s disclosure last week that it lost digital tapes containing the credit card account records of 1.2 million federal employees, including 60 U.S. senators (see story).
ChoicePoint, in Alpharetta, Ga., has also been the focus of intense scrutiny and criticism since it acknowledged that identity thieves posed as legitimate customers to gain access to the company's database of 19 billion public records. Some of the information stolen from ChoicePoint has since been used in about 750 identity theft scams, according to the company.
The company said last week that it is discontinuing data salesto many of its customers, except when that data helps complete a consumer transaction or helps government or law enforcement.
Since disclosing the security breach, ChoicePoint has been the subject of a U.S. Federal Trade Commission inquiry into its compliance with federal information security laws; a U.S. Securities and Exchange Commission investigation into possible insider stock trading violations by its CEO and chief operating officer (see story); and lawsuits alleging violations of the federal Fair Credit Reporting Act and California state law.
ChoicePoint disclosed the inquiries in a filing to the SEC on March 4.


Reprinted with permission from

IDG.net
Story copyright 2009 International Data Group. All rights reserved.

Additional Resources

Xerox
By using solid ink technology only from Xerox, you could save up to 65% by printing color for the cost of black and white. Enter for a chance to WIN a PhaserTM 8860 network color printer!
Microsoft
Save time and mitigate security risk. Deploy it now.
Sybase
In this white paper, IDC analyzes the role of next-generation mobile enterprise platforms as organizations seek a more strategic deployment of mobile solutions.

Learn the important issues you must consider before starting your next mobility initiative. Get your mobility white paper from IDC now, compliments of Sybase.

White Papers & Webcasts

How Controlling Access to Privileged Accounts Can Keep Insider Threat from Hurting Your Bottom Line
This white paper explores insider attacks and insider risk, and shows how to control them by controlling and monitoring access. The paper describes...  

Usability Is Everything
Learn what sets Workday's HR and Payroll solutions apart from the competition....

Military Uses Bit9 Parity to Defend Against New Generation Attacks
When a military organization faced an exercise, in which there was an attempt to breach and infect the network, they decided to use...  

The Value of Real SaaS at Workday
Cost savings, speed to value, and innovation brought to the enterprise by Workday's software-as-a-service solutions for HR and Payroll....

Eliminate Spam, Gain Productivity
In this exclusive whitepaper, learn all about the dangers of spam and the cost to your business....  

SaaS at Flextronics, Inc.
Dave Smoley, CIO of Flextronics, discusses the real value of software-as-a-service and why he chose Workday for his HR solution....

Accelerate SSL Encrypted Applications
The amount of SSL traffic is growing in the enterprise. Because it is encrypted, it cannot be properly controlled and accelerated. Blue Coat...  

Why Compliance Pays
This OnDemand webcast explores the relationship that firms with best compliance records have higher revenue, greater customer retention, lower financial losses from data...

ESG Lab Field Audit
Many companies have successfully implemented Riverbed WAN optimization solutions within their Cisco networks. This ESG Lab Field Audit document explores the success that...  

Agile Enterprise Content Management (ECM) for Rapid ROI
Find out how combining ECM and BPM will help adress issues about content rich business processes....

 

Symantec Report on the Underground Economy
The Symantec Report on the Underground Economy examines activity on underground economy servers observed by Symantec between July 1st, 2007 and June 30th, 2008. It includes analysis and discussion of the goods and services advertised, advertisers participating in the economy, the servers and channels that host the trading, and a snapshot of piracy activity observed.
Download this white paper 
Data Loss Risks During Downsizing
With the dramatic increase in lost jobs, companies should be aware of the possibility that these employees may be walking off with their sensitive and confidential data. An independent study done by the Ponemon Institute surveyed employees leaving their jobs and taking company data with them. This type of data loss problem may be putting companies at risk for a potential data breach. This study will help you to understand what employees are doing with the data on the laptops their employers provided them.
Download this white paper 
3 Steps to Protect Confidential Data on Laptops
Learn how to avoid being part of the one-third of security breaches that occur due to laptop theft. This report outlines specific steps to help you secure confidential data and minimize the impact of data loss resulting from stolen or missing laptops.
Download this white paper 
Managing Spend on Information Security and Audit for Better Results
The benchmarks conducted by the IT Policy Compliance Group show almost all organizations have financial incentives exceeding 100 percent to make improvements to reduce financial risk from data loss, downtime and regulatory audit. This report includes findings covering the principal operational outcomes being experienced by organizations, financial risks, losses and returns, and the practices making the most difference to control risks, reduce costs, and improve results.
Download this Report!