Database admin discovers major US carrier stored credit card data in plaintext on first day
By
Avram Piltch
Summary
A database administrator (anonymized as "Joker") recounts how on her first day at a major US cellular carrier in the early 2000s, she discovered the company was storing customer credit card information in plaintext (unencrypted). The article is part of a weekly column called PWNED that highlights tech security mistakes to help readers avoid similar errors.
Source
bskyDatabase admin discovers major US carrier stored credit card data in plaintext on first daytheregister.comKey quotes
· 3 pulledBack in the first decade of the 21st century, she went for a job interview at one of the USA's leading national cellular carrier
PWNED Welcome back to PWNED, the weekly column where we register some of the worst tech security mistakes our readers have ever seen.
Our goal: to help you not do the same.
You might also wanna read
Unsecured Database Exposes 149 Million Login Credentials Without Protection
Security researcher Jeremiah Fowler discovered an unsecured database containing 149 million unique login credentials including emails, usern
techrepublic.com·4mo ago
Credit Card Data Vulnerable to Derivation Attacks Despite PCI DSS Compliance
The article discusses how credit card data can be stolen or derived even from PCI DSS compliant ecommerce websites. The author shares a pers
Substack Confirms Data Breach Affecting User Email Addresses and Phone Numbers
Substack has confirmed a data breach where an unauthorized third party accessed user data including email addresses, phone numbers, and inte
techcrunch.com·4mo ago
Major U.S. Banks Assess Data Theft After Cyberattack on Financial Tech Firm SitusAMC
U.S. banking giants including JPMorgan Chase, Citi, and Morgan Stanley are assessing the extent of customer data theft following a cyberatta
techcrunch.com·6mo ago
Analysis of Apple's Unencrypted Server Connections and Surveillance Concerns
The article presents a conspiracy theory that Apple intentionally preserves unencrypted server connections in its operating systems to enabl