Wednesday 28 December 2011

Damage From The Stratfor Hack Has Been Publicized: Over 50,000 Credit Cards, 80,000 Emails, 44,000 Passwords

A few days after the private security think tank, Stratfor, revealed that they had been the victim of a cyber-attack by individuals affiliated with Anonymous, the extent of the attack has finally become clear.


Identify Finder, an identity theft protection firm based in New York, has recently publicized their analysis of the security breach and, it doesn’t look good:
  • 50,277 unique credit card numbers, of which 9,651 are not expired
  • 86,594 email addresses, of which 47,680 are unique
  • 27,537 phone numbers, of which 25,680 are unique
  • 44,188 encrypted passwords, of which roughly 50 percent could be easily cracked
  • 73.7 percent of decrypted passwords were weak
  • 21.7 percent of decrypted passwords were medium strength
  • 4.6 percent of decrypted passwords were strong
  • Average decrypted password length: 7.1 characters
  • 10 percent of decrypted passwords were less than 5 characters long
  • Only 4.8 percent of decrypted passwords were 10+ characters long
  • Presumably the remaining non-decrypted passwords were stronger than the decrypted subset
  • 13,973 of the addresses belonged to United States victims; the remainder belonged to individuals from around the world
Additionally, the hackers claim to have taken an extra 2.7 million email messages – but, the validity of this statement has yet to be confirmed.
Stratfor has promised to inform their customers whose information has been compromised, or taken, no later than tomorrow (December 28th).
Stay tuned for more information related to Anonymous and their various attacks.

No comments:

Post a Comment

ShareThis