[ISN] Demon ebill blunder exposes thousands of passwords

From: InfoSec News <alerts_at_private>
Date: Fri, 25 Sep 2009 00:16:12 -0500 (CDT)
http://www.pcpro.co.uk/news/security/351814/demon-ebill-blunder-exposes-thousands-of-passwords

By Barry Collins
PC Pro
23 Sep 2009

Demon Internet has sent out a spreadsheet containing the personal 
details of thousands of customers with one of its new ebills.

The spreadsheet - which has been forwarded to PC Pro - contains email 
addresses, telephone numbers and what appears to be usernames and 
passwords for the ebilling system.

The spreadsheet was sent to a PC Pro reader who was staggered to 
discover it attached to an email explaining how to use the new system.

Demon is refusing to disclose how many customers have received the 
spreadsheet, although it says it's less than a few thousand.

The Excel spreadsheet - which isn't password protected - contains more 
than 3,600 records. It includes the full name of the customers, email 
addresses, telephone numbers and names of the customers' businesses. 
Police forces, NHS trusts and government officials are among the email 
addresses listed in the database.

[...]


________________________________________ 
Did a friend send you this? From now on, be the 
first to find out! Subscribe to InfoSec News 
http://www.infosecnews.org
Received on Thu Sep 24 2009 - 22:16:12 PDT

This archive was generated by hypermail 2.2.0 : Thu Sep 24 2009 - 22:23:06 PDT