AN AUSSIE IT worker found a cache of 22,000 credit cards by searching on Google. More than 19,000 cards were active and the cache included card numbers, expiration dates, names, addresses, and CVV codes.
It appears that the cache was found on an outdated card processing server. Google has since blocked access to the cache of the directory listing where the discovery was made.
According to Techherald it looks like the information came from certain shops and it was not stolen, just poor file management by the outfits involved. µ
Most companies enjoy “security” insofar as they haven’t been targeted, or had an employee make a human error with catastrophic exposure. Price Waterhouse Cooper and Carnegie-Mellon’s CyLab have recent surveys that show the senior executive class to be, basically, clueless regarding IT risk and its tie to overall enterprise (business) risk. Data breaches and thefts are due to a lagging business culture – absent new eCulture, breaches will, and continue to, increase. As CIO, I’m constantly seeking things that work, in hopes that good ideas make their way back to me - check your local library: A book that is required reading is "I.T. WARS: Managing the Business-Technology Weave in the New Millennium." It also helps outside agencies understand your values and practices.
The author, David Scott, has an interview that is a great exposure: www.businessforum.com/DScott_02.html -
The book came to us as a tip from an intern who attended a course at University of Wisconsin, where the book is an MBA text. It has helped us to understand that, while various systems of security are important, no system can overcome laxity, ignorance, or deliberate intent to harm. Necessary is a sustained culture and awareness; an efficient prism through which every activity is viewed from a security perspective prior to action.
In the realm of risk, unmanaged possibilities become probabilities – read the book BEFORE you suffer a bad outcome – or propagate one.
Thanks to the security feature called CVV code, everything will be fine - cough.
I Wonder what search key he used.
I can understand how an inferior might make that kind of information available on the net. But how are the IT systems people allowing any machine that is net accessable to even be storing such numbers?
I would fire them on the spot.
Gone
History
And remove their testicles to prevent them from producing offspring who are equally inferior.
So it’s not Google fault, yet they have some nasty spiders there :p
So the question is: Where is the backup that the guy who found that made??? Feel free to share it :)