Adobe has discovered evidence of illegal activity occurring on its network “recently,” with the result being a lot of product and customer data having been stolen.
In total, around 2.9 million customer records were accessed with the following information taken:
-Adobe customer ID
-Encrypted passwords
-Customer name
-Encrypted credit card numbers
-Encrypted debit card numbers
-Card expiration dates
There’s also other customer information taken which Adobe hasn’t detailed yet, but what’s listed above is serious enough. Adobe claims that no decrypted credit or debit card numbers were accessed, but it’s worrying that any numbers are actually being stored in decrypted form in the first place.
How do you know if your account was accessed? Adobe is taking the precaution of resetting account passwords, so if your account was accessed illegally, expect an email from Adobe asking you to change your password. However, be aware that whoever stole the information may attempt to contact you posing as Adobe, so please check the source of any correspondence you receive.
Even though only encrypted credit card numbers were taken, Adobe will be contacting customers whose payment information was accessed separately. As a good will gesture Adobe will be offering a one year complimentary credit monitoring service membership as well as guidance on how to protect against card fraud.
Away from customer data, source code for several of Adobe’s products was also taken. It may be some time before we see if that is used for anything malicious. It may be used to identify vulnerabilities in Adobe’s products in order to exploit them, or we could see hacked versions of the applications appearing for download, potentially with malware attached.
Adobe intends to find out and prosecute whoever carried out the illegal server access and has contacted federal law enforcement for help.
0 comments :
Post a Comment