Posts tagged ‘Credit card’

May 3, 2011

Hackers wage war on Sony and make off with another 25 million users’ credit card details

[Ivichi Buchwa, Internet News Contributor]

New Statesman: Sony has been hacked again. This time the hackers mauled its ‘outdated database’ and made off with 25 million of Sony’s users’ names, credit card details, home addresses, date of birth and phone numbers.

Since then, an angry and frustrated Sony has de-activated its Online Entertainment service. Two weeks earlier, the media giant had been hacked when its  Playstation Network was ravaged by cyberbandits who had stolen details of 77 million of its users.

The latest hack, which took place this week, compromised PC and Facebook users. Direct debit data of well over 10,000 Austrian, Spanish, Dutch and German customers, plus 12,000 non-US users, were siphoned off too.

The company is hopping mad about the breaches, but so far does not appear to have an effective plan to stop them.

May 1, 2011

‘Game over’ for 77 million users of Sony’s PlayStation Network as hacker makes off with their personal details

eWeek.com: Sony’s PlayStation Network, now down for a week, is a major embarrassment for the media giant which admitted last week that a hacker (‘unauthorised person’) has made off with personal data on 77 million of the network’s users.

According to Sony, the ‘unauthorised entry’ accessed user’s personal information (which includes addresses, users’ names, passwords and login details, email addresses, etc.) kept on the PlayStation Network and the Qriocity online music and video service. User’s credit card and purchase data may also have been stolen.

[Jerry Maines, PlayStation Network Contributor]

Hackers Are Selling 2.2 Million Stolen Credit Cards From The PlayStation Network (SNE) (businessinsider.com)
Sony PlayStation Network’s 77 Millions Users Information Stolen. (ramanan50.wordpress.com)
PlayStation Network And Qriocity Services Questions And Answers (slashgear.com)
“Sony Admits Security Breach In PlayStation Network, Qriocity Services” and related posts (moconews.net)
PlayStation Network Hacked – How to Protect Your Personal Security (lockergnome.com)
Sony says hacked PlayStation Network credit card data was encrypted (venturebeat.com)
Your PlayStation Network Info May Have Been Stolen (pamil-visions.net)
Sony Admits Security Breach In PlayStation Network, Qriocity Services (paidcontent.org)
Sony PlayStation Network security breach exposes millions of accounts (news.consumerreports.org)
PlayStation Network: hackers claim to have 2.2m credit cards (terryolgin.wordpress.com)

March 25, 2011

Check your credit card statements for small, strange debits – chances are that you are being scammed

According to a recent  BankInfoSecurity report, a vintage credit card scam has reappeared in France which is different from the now most popular card reading and duplicating  methods.

This time, it seems that the fraudsters did not have to spend a lot of time on technical solutions as the forged cards are likely to have nothing more that the bank‘s ID number.  Notwithstanding, the fraudsters are getting the cards to work.

A US International Airline Employees Federal Credit Union got targeted first with the scam when at the beginning of March the employees noticed strange transactions being done with their IAEFCU Visa cards, although not exceeding $15 at a time.

IAEFCU informed its card insurance company, but the damages were not great enough to persuade the insurer to start an investigation. The company’s payment processor was not that interested in stopping the transactions either because of the small amount of money being siphoned off.

But, credit card safety experts are pointing out that the scheme has been on the go since  the 1990’s and the reason for its continuance is the inherent weakness of banks’ online facilities such as ‘credit master’ etc. According to Mike Urban, a senior director of fraud management at FICO,  a company providing analysis services: ‘Fraudsters use these applications to create legitimate card numbers for a given BIN, which is easy for them to find online. It may not be an active card number, but it could be a possible or potential card number……they then test the BIN by just running it through. It creates an algorithm.’

However, specialists have confirmed that there is no reason for fear. Without more card information than its number and the bank’s ID, large  transactions can never get authorized. But as for the existing problem, the solution for the banks is quite simple:- avoid issuing card numbers in sequential ranges, which makes applications such as credit master and credit wizard less effective.

[Financial Fraud Contributor]