March 9, 2005 (IDG News Service) --
Hackers have compromised databases belonging to LexisNexis and stolen information on at least 32,000 people, according to a statement today from LexisNexis' parent company, Reed Elsevier PLC. The hackers stole passwords, names, addresses, Social Security numbers and driver's license numbers of legitimate customers of the company's Seisint division. Seisint collects data on individuals that is used by law enforcement agencies and private companies for debt recovery, fraud detection and other services. LexisNexis identified the incidents in a review of security procedures and warned that there may be more incidents of data theft, Reed Elsevier said. The incident is eerily familiar to recent revelations about similar compromises at Seisint competitor ChoicePoint Inc., which acknowledged last month that hackers had access to data on 145,000 people (see story). Reed Elsevier didn't immediately respond to requests for comment. LexisNexis, which acquired Boca Raton, Fla.-based Seisint Inc. in September for $775 million, expressed regret for the incident and said it is notifying the individuals whose information may have been accessed and will provide them with credit-monitoring services. The company also said it notified law enforcement officials and is assisting with investigations of the fraudulent account access. Like ChoicePoint, Seisint maintains a massive database of public and private information on individuals, including Social Security numbers, credit histories and criminal records. Seisint made the news in recent years as the data source behind the Multistate Anti-Terrorism Information Exchange, or MATRIX, system, a program to bring together criminal and public records from participating U.S. states. Bill Shrewsbury, a vice president at Seisint, said that identity thieves used a different approach to breach the company's database than what was used to get ChoicePoint's data. But he declined to elaborate. LexisNexis said it is taking actions to improve its ID and password administration security, as well as customer screening. The incident is the latest in a series of revelations about consumer data being leaked or lost. Those incidents include the ChoicePoint compromise and Bank of America Corp.'s disclosure last week that it lost digital tapes containing the credit card account records of 1.2 million federal employees, including 60 U.S. senators (see story). ChoicePoint, in Alpharetta, Ga., has also been the focus of intense scrutiny and criticism since it acknowledged that identity thieves posed as legitimate customers to gain access to the company's database of 19 billion public records. Some of the information stolen from ChoicePoint has since been used in about 750 identity theft scams, according to the company. The company said last week that it is discontinuing data sales to many of its customers, except when that data helps complete a consumer transaction or helps government or law enforcement.
"Welcome to a special IT Blogwatch EXTRA: as Richi Jennings watches bloggers' reactions to the Russian hackers who claim to..."
Read more...
"As if taxpayers needed another reason to scorn the IRS. I read yesterday that the inspector general review of several..."
Read more... Read more Security posts or See all Blogs
One positive development stemming from the collapse of Wall Street may be a boost in interest in computer science and IT careers among students who were previously interested in financial services jobs.
Virtualization: Simplify. Automate. Lower Costs. Watch this complimentary webcast today! Go to the webcast
Computerworld Executive Bulletin: Building a Robust Antivirus Defense
Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs. (Source: MessageLabs) Antivirus software alone isn't enough to prevent today's speedy, sophisticated virus attacks. Security managers should consider multitiered approaches that include behavior scanning, appliances that check e-mail for worms, and restricting user access to dangerous Web sites. Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs, to learn more. Download this executive briefing
White Papers
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
Quick Sizing Guide for SAS Grid Running on HP BladeSystems and EVA Storage
Download this white paper today! (Source: HP) Designed for CIOs, IT managers, data center managers and grid computing architects seeking to improve performance, SAS Grid Computing on the HP BladeSystem c-Class helps accelerate growth and mitigate risks with a simplified, consolidated infrastructure that's agile enough to efficiently handle change. SAS Grid Manager on HP BladeSystem can lower costs through automation, virtualization and improved IT efficiency. Download this white paper
Go Green with Webroot® Perimeter Security SaaS! Webroot Perimeter Security SaaS is a powerful alternative to obsolete on-premise hardware based security solutions. SaaS allows businesses to obtain flexible protection through an expert security provider, solving the problems caused by software, hardware and appliance solutions. Benefits include easier manageability, better protection and guaranteed performance all at a lower cost. Register for your free copy of the "Why Security SaaS Makes Sense" whitepaper and Go Green with Webroot! Download this white paper now!
In Security Stripping away the trappings of applications, systems and networks, information is the core asset of most organizations. Our columnist describes how asserting the importance of information governance is crucial to making that asset tangible, addressable and protected.
Click here to read the latest column by Jon Espenschied
Protecting Exchange While it was once just a convenient way for employees to communicate internally, today e-mail systems like Exchange are tightly integrated with other business applications and are one of the primary methods for communicating with current and prospective customers. Protecting Exchange against costly downtime has become a top priority for more IT departments. So how do you ensure that your Exchange environment is always protected? Download this
white paper now!
The Spy Files For Congress to do anything that helps protect consumers and the critical Internet infrastructure as a whole, it must pass laws that require proactive processes to protect computers, not that tell people how to deal with the resulting mess, says Ira Winkler.