Slashdot Mirror
ClixSense Suffers Massive Data Breach, 6.6 Million Users Compromised (digitaltrends.com)
An anonymous reader quotes a report from Digital Trends: ClixSense, a site which pays users to view ads and take surveys, was the victim of a massive data breach compromising around 6.6 million user accounts. Usually when there's a data breach of this size, the information stolen contains usernames, passwords, and some other personal information, but due to the nature of ClixSense and the service it provided, home addresses, payment histories, and other banking details have also been compromised. According to the message posted to PasteBin along with a sample of the stolen data, social security numbers, dates of birth, and some internal emails from ClixSense may also have been compromised. Ars Technica reported this morning that about 2.2 million people have had their data posted to PasteBin over the weekend, reportedly just a taste of the 6.6 million user accounts that have been stolen. The hackers responsible stated in their PasteBin post that they intend to sell the user information they gathered, without disclosing a specific price. PasteBin has since removed the posts and the sample of the compromised user account information.
What's the over/under on all data stored in the clear unhashed/unsalted?
If you are willing to view ads and take surveys... do you EXPECT your info to be protected?
What's the over/under on all data stored in the clear unhashed/unsalted?
based on the sample data, it looks like it was *all* cleartext, nevermind salted.
whois gawk date unzip strip find touch finger mount join nice man top fsck grep eject more yes exit umount sleep dump
Where's the "-1 Idiotic" mod when you need it?
Who cares, it's 6.6 million poor people. This data is worthless, they have no money to scam/steal.
I'd be amused if you STFU forever.... obviously, period.
And when thieves use this info for identity theft and credit fraud, these poor people are going to have that much harder a time getting out of poverty!
Defending IP by destroying access to it? That makes sense, RIAA/MPAA. Go to the corner until you can play nice!
STFU statist.
You might be surprised who falls for scams like "Now hiring data entry workers, work from home with no credit or background check! Get started today, click here to submit your application and $5 processing fee." It's not rich people who get suckered $5 at a time by those offers, it's desperate people, and this list will contain a lot of desperate people.
"If there was a gay Afro-Puertorican Linux distribution, I'd give it a try" ~lucm
"People like you...
-> BARNEY
Well...
And you,
-> UH, CLEM
People who are alter..." (Firesign Theater, I Think We're all Bozos on this Bus)
No doubt companies have been fined and/or penalized in the courts for leaking information like this. And rightfully so, but has any executive ever been held responsible, paid a fine or done jail time? Corporations don't make decisions, humans do. They are responsible.
...omphaloskepsis often...
@Anonymous Coward: "Once again we see how government IT is 100% complete garbage. If it weren't for the fact that my tax dollars were STOLEN from me to pay some fucking incomptent union boobs with cadillac health care plans, I'd be amused, but obviously I aint. When we will learn that government is evil and that everything it touches turns to shit?"
.. unions FAP .. health care FAP FAP .. liberals FAP FAP FAP ... UUUGH!
Is that you Bill O' Reilly
In today's world everyone should sacrifice a few milliseconds of their browsing time to allow encryption/decryption of data. All people who create websites should be forced by law to make sure ALL data held in text files and Databases should be encrypted and salted (and not just passwords and credit card data). This is the only way to secure data regardless of how good developers are at web security and vulnerabilities within their PHP code etc.
Of all the data breaches in the past years, this one is the first (and possibly the only) one that I can only meet with a heartfelt "meh".
People who agree to watch ads and answer surveys for money already have lost all their privacy. It's not like anyone (but the party responsible for the data breach) got damaged by this.
And "oh no, now they can get scammed...". Stop. Do you really think that it makes a difference whether the scammer buys the data from the hacker or from Clixsense?
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.