Columbia House breach exposes customer info

Da_Taxman used our newssubmit to tell us:

Apparently some people actually buy music still (ok, I am one of them 😉 ) and now it is all out in the open who these people are. These are potential customers to some of you out there



Music company Columbia House left a hole in more than its CDs during the past week, when a security breach on its Web site exposed thousands of customer names, addresses and portions of credit card numbers.

(...)

Mark Always, a software developer from Seattle, discovered the breach Friday evening while shopping for CDs with a friend. He found that by eliminating part of the Columbia House Web address, which contains more than 100 characters at any given time, he could reach a directory of administrative tools normally unreachable to the average Web surfer.

(...)

Through the Columbia House breach, Always said he had access to personal data on 3,700 customers, which Kirsch would not confirm or deny



Source: dailynews.yahoo.com

No posts to display