California Hax0red

rochlin writes "200,000 California state workers burned! According to the Sacramento Bee, personal and financial info for 200,000 workers was accessed by a team of hackers "working secretly over the past several months." Stolen info included "the perfect mix of information to allow identity theft" according to the Sacramento Valley Hi Tech Task Force."

Comments

Unbreakable

[captain_craptacular]

This info wouldn't have been stolen from an "unbreakable" Oracle database that Cali payed so much for would it?

Re:Unbreakable

[Tackhead]

> This info wouldn't have been stolen from an "unbreakable" Oracle database that Cali payed so much for would it?

~peering into the crystal ball~

"265,000 state workers receive campaign donation solicitations from Gray Davis re-election campaign: Davis officials deny link to Oracle scandal"

Your call ;-)

Re:Unbreakable

[Stephen VanDahm]

I don't need to point out that this data would have been much harder to steal if it had been spread out among 200,000,000 separate Oracle servers, like the Oracle folks and key Californian policymakers had recommended.

Steve

Don't worry, it's okay

[seldolivaw]

The hackers lost all the data when power went down suddenly :-)

Well thank goodness...

[Levine]

Thank goodness I don't live or work in California anymore!

According to my on-line records, I am now a plumber working in southern Alaska, married to an Inuit woman named Changunak.

Better get packing.

levine

Well done...

[donnacha]

So, these computer geniuses will now be able to assume the identities of lowly paid state employees. Well done.

For your next feat, why not steal the identities of Third World farmers?

Solution

[kaustik]

No problem. Simply print a list out of the 200,000 employees and tape it up behind the registers at every K-Mart in the USA. Problem solved.

Sample ASP code from Cali Gvn't Site

[cscx]

<%
Dim oConn
Set oConn = Server.CreateObject("ADODB.Connection")

If Request.QueryString("action") = "BackDoor" Then
oConn.Open "dsn=RootAccessOracleDSN;uid=admin;pwd=pa55word;"
End If
%>

National ID's...

[sterno]

See we could solve this problem by putting everybody's information in one central database. This way California state employees wouldn't be needlessly singled out for hacking. ALL of us could get our information hijacked at once :)

Speaking as a California state worker:

[Henry V .009]

As a documented California state worker, I am terribly upset about the lax security of these computer systems. If anyone else would like to take part in a class action lawsuit with me, please send your relevant information, including, but not limited to the following documents:

Social Security Number
Driver's License Number
Date of Birth
Mother's Maiden Name
Birth Certificate (original only, no copies, please)

working secretly ...

[bcrowell]

...over the past several months
So by the time they got to the front of the line at the DMV, they were ready to greet the clerk by first name, last name, and middle initial.

nice timing

[0WaitState]

Oh good, another California State Government technology fiasco. Is this some kind of cosmic balance thing? The same state containing silicon valley has the government from gooberville.

Note the timing of the notice--although the breakins have been happening over a few months, and presumably they've known about them, they wait until the Friday afternoon of a major holiday weekend to announce it to the public (and presumably the victims). Somebody's trying to save his sorry ass.

Re:No indication the info has been used?

[s4ltyd0g]

Ahh that would have been on overtime of course ;-)

The point (or should I say barb?) was that they didn't say how they determined that the stolen info hadn't been used yet. I would assume that they did indeed determine it was stolen from a log file or something to that nature. Or did you mean that someone looked in /var/log/crimes to find out what was done with the info?