WebHostingTalk – hacked (again) with credit card details compromised
Posted on 07 Apr 2009 by Matt Russell
Update #2 by Tyler
We’re now getting information that the stolen data includes CVV2 data. According to the PCI DSS standards, the storage of CVV2 data is strictly forbidden. This should create some interesting discussions on why this information was allowed to be stored in the first place.
More information on PCI-compliant data storage: https://www.pcisecuritystandards.org/pdfs/pci_fs_data_storage.pdf
Update #1 by Tyler
WebHostingTalk is now publicly acknowledging that they have received further communication from the hacker and that credit card information has been stolen. They are claiming the data is only from December 2007 or earlier.
At this point in a security investigation, it is our advice that you go ahead and cancel the credit card you are currently using with them and get fraud monitoring on all your accounts immediately.
We will post more information as we can. Thank you!
Original post:
Hello All,
This is just a warning to all of those who use WebHostingTalk. It has been hacked once more and this time the accounts database has been compromised, including credit cards for those who have paid for advertising.
I have verified it has been hacked and decrypted correctly, because my old card details were exposed, including the full credit card number, expiration date, and my full name on the credit card. They got all the information 100% correct.
So please, if you have advertised with WHT/inet, or even paid for a premium membership then cancel your credit card and watch out for unauthorized charges.
– Matt
Strategic Positioning in Web Hosting: Putting You Ahead of Your Competition
07 Apr 2009 by
Warning: printf(): Too few arguments in /home2/blogwebhostingbu/public_html/wp-content/themes/webhostingbuzz-blog/single.php on line 45
WebHostingTalk Database Breach, Credit Cards Stolen: Lessons Learned for Web Hosts Everywhere
09 Apr 2009 by
Warning: printf(): Too few arguments in /home2/blogwebhostingbu/public_html/wp-content/themes/webhostingbuzz-blog/single.php on line 67