Newsletters
News & Information for Technology Purchasers NewsFactor Sites:       NewsFactor.com     Enterprise Security Today     CRM Daily     Business Report     Sci-Tech Today  
   
This ad will display for the next 20 seconds. Click for more information, or
Home Enterprise I.T. Cloud Computing Applications Hardware More Topics...
Eliminate costly downtime!
Find out how with Free White Paper
& enter to win a Samsung Galaxy Note

www.apc.com
Enterprise I.T.
24/7/365 Network Uptime
Average Rating:
Rate this article:  
PR Newswire Hack Linked To Adobe Breach
PR Newswire Hack Linked To Adobe Breach

By Jennifer LeClaire
October 17, 2013 10:53AM

    Bookmark and Share
The latest victim of an Adobe-related hack, PR Newswire was concerned that a malicious third party could use the stolen information to impersonate its customers, maybe causing official-looking but fraudulent press releases to be sent in the name of customers. Corporate identity fraud can be devastating to businesses and markets, said one analyst.
 



The fallout from an Adobe breach is spreading a little wider. Security researchers are reporting that the same cybercriminals who hacked into LexisNexis have also hijacked data from the wire service PR Newswire.

According to information security firm Hold Security, partial Web site source code and configuration data, along with a database of PR Newswire customers, was found on the same server where Adobe Systems’ source code was located. And that spells trouble.

“Cleverly disguised as an image, an archive of PR Newswire was found on hackers’ repository server,” Hold reports. “The database date appears to be from March 8, 2013 but it is unclear yet if the breach had happened at the same time or at a later date as the archive was created on April 22, 2013.”

What’s the Damage?

PR Newswire has confirmed the attack. PR Newswire is reportedly investigating the issue, which appears to be limited to customers from Europe, the Middle East, Africa and India. The company was not immediately available for comment, but KrebsOnSecurity reports it will begin the process of alerting affected customers and asking them to change their account passwords later today.

In a written statement to KrebsOnSecurity, PR Newswire said that at this point there is no evidence to suggest that the intrusion into its networks was in any way related to what happened with Sweden-based press release distributor Cision AB last week. At that time, the company said it was conducting an investigation into an erroneous press release that it published. The release stated that Samsung Electronics Co. would be purchasing Fingerprint Cards, a Swedish technology firm, for $650 million -- information that was inaccurate.

“PR Newswire has protocols and redundancies in place that are designed to minimize the risk of distributing fraudulent press releases, including both technological and human safeguards prior to issuing any release," the statement reads.

“The database contains approximately 10,000 records; however, there is only a minority of active users on this database. Those users represent an even smaller number of customers, as each customer generally has multiple usernames. PR Newswire decided to implemented a mandatory password reset for all customers with accounts on this database as a precautionary measure,” according to the statement.

The Broader Impacts

We turned to Aaron Titus, CPO at Identity Finder, a security and privacy firm, to get his reaction to the latest Adobe-related breach. He told us while we often think of identity fraud as a consumer problem, corporate identity fraud can have devastating effects on businesses, markets, and even public health.

“In this case, PR Newswire was concerned that a malicious third party could use the stolen information to impersonate their customers, potentially causing official-looking -- but fraudulent -- press releases to be sent in the name of customers like Chevron, Procter & Gamble, General Motors, and the World Health Organization,” he said. “It is easy to imagine the havoc that could be caused by such corporate identity fraud. PR Newswire forced a password reset for all of their customers, as a precaution."
 

Tell Us What You Think
Comment:

Name:

Ilias Ismanalijev:

Posted: 2013-11-10 @ 2:15am PT
I've made a little tool that lets you check for your e-mail in the list: http://adobe.breach.il.ly/



You have the experience and skills, let an ISACA® certification demonstrate your value. Our certifications announce that you have the expertise and insight to speak with authority. ISACA certification is more than a credential; it's a platform that can elevate your career. Register for an Exam Today.


 Enterprise I.T.
1.   Windows 7 Ends Mainstream Support
2.   Another IE-Focused Patch Tuesday
3.   BlackBerry's Hip To Be Square
4.   Gartner Rates IT Security Companies
5.   Google I/O Brings a Lot for Biz Users


advertisement
Windows 7 Ends Mainstream Support
But extended support still available.
Average Rating:
Another IE-Focused Patch Tuesday
One critical for Internet Explorer.
Average Rating:
Gartner Rates IT Security Companies
IBM, HP, McAfee, Splunk ranked well.
Average Rating:
Product Information and Resources for Technology You Can Use To Boost Your Business

Network Security Spotlight
Report: Chinese Hackers Hit U.S. Personnel Networks
Hackers from China broke into the computer networks of the U.S. Office of Personnel Management earlier this year with the intention of accessing the files of tens of thousands of federal employees.
 
Charges: Russian Stole Data from U.S. Restaurants, Zoo
A Russian man arrested on bank fraud and other charges hacked into computers at restaurants in Washington, hundreds of other retail businesses, and even the Phoenix Zoo, authorities say.
 
Another Month, Another IE-Focused Patch Tuesday
Microsoft rolled out 59 vulnerabilities for Internet Explorer in June. But the IE-patching party is not over yet. Redmond published six new security bulletins on Tuesday; two, critical; three, important.
 

Enterprise Hardware Spotlight
Another Day, Another Internet of Things Consortium Is Born
In the emerging Internet of Things, zillions of devices will be talking to each other. Samsung, Intel and Dell just formed a consortium to ensure each thing can understand what others are saying.
 
Gartner Sales Study Sees Tablets Up, PCs Down but Recovering
Are PCs on the comeback trail? That depends on how you define "comeback." While tablet sales remain strong, Gartner's latest study found PC shipments aren't dropping as fast as they did last year.
 
Review: Warming Up to Tablets with Keyboard Covers
If you've ever thought tablets with keyboard covers were just a poor excuse for a laptop, think again. Nokia's Lumia 2520 comes with an optional keyboard cover that just may change your mind.
 

Navigation
NewsFactor Network
Home/Top News | Enterprise I.T. | Cloud Computing | Applications | Hardware | Mobile Tech | Big Data | Communications
World Wide Web | Network Security | Data Storage | Small Business | Microsoft/Windows | Apple/Mac | Linux/Open Source | Personal Tech
Press Releases
NewsFactor Network Enterprise I.T. Sites
NewsFactor Technology News | Enterprise Security Today | CRM Daily

NewsFactor Business and Innovation Sites
Sci-Tech Today | NewsFactor Business Report

NewsFactor Services
FreeNewsFeed | Free Newsletters | XML/RSS Feed

About NewsFactor Network | How To Contact Us | Article Reprints | Careers @ NewsFactor | Services for PR Pros | Top Tech Wire | How To Advertise

Privacy Policy | Terms of Service
© Copyright 2000-2014 NewsFactor Network. All rights reserved. Article rating technology by Blogowogo. Member of Accuserve Ad Network.