Hackers Steal 40,000 Users' Details From Adult Site

[engine]

Hackers Steal 40,000 Users' Details From Adult Site [bbc.co.uk]

Hackers claim to have stolen the details of more than 73,000 subscribers to pron site Digital Playground.

The data includes user names, email addresses and passwords. Also taken were the numbers, expiry dates and security codes for 40,000 credit cards.

The attack is the second successful breach of a site run by website management company Manwin.

[topr8]

...hmm

i thought it was a severe breach of terms and conditions to store security numbers.

in which case surely these guys should be sued into bankruptcy.

[rocknbil]

And in plain text no less. LOL . . . "Nothing will ever happen. You geeks are crazy, the sky is NOT falling, now shut up and get back to work."

[incrediBILL]

Anyone storing CCs in plain text deserve to get hacked.

Actually, anyone storing CC's these days EXCEPT the CC processors themselves pretty much deserve to get hacked because there is no good reason to do it, not even for recurring billing.

Anyone storing security codes needs to be dragged out in the city square and flogged, that's plainly against the rules and in many places an actual crime.

Someone was either being lazy or too cheap to upgrade to modern APIs, obviously violating every CC processing rule in the book, and got what they deserved IMO.

Hopefully these people never get permission to process another credit card again but the greedy companies will just slap 'em with a little fine, smile and look the other way after all the dust settles.

[engine]

Whilst I agree about the lack of security of the firm involved, the other issue is the theft of the credit card info. Who knows if it'll be used fraudulently.

It does make me wonder why the card processors allow such shoddy storage of data.

Perhaps the banks/card processors demand a higher degree of security before they will work with firms?

[lawman]

I hope my wife doesn't find out. :)

[Habtom]

I hope my wife doesn't find out. :)

LOL. The credit card info being exposed won't be an issue for many as far as their names are not posted somewhere on the net :)