NCIX Data Breach

[Janus67]

They just keep coming.

Found here:

https://www.reddit.com/r/sysadmin/comments/9hh5eg

https://www.privacyfly.com/articles/ncix_breach/

I first sat down at the desktop and discovered that it was used by a former NCIX employee named Chadwick Ma. The computer contained a treasure trove of confidential data including credentials, invoices, photographs of customers ID’s, Bills, and Mr. Ma’s T4 among other files.

I mounted one image belonging to Steve Wu the founder of NCIX. Inside I found data going back 13 years, financial documents, employment letters containing SIN numbers, and data from Mr. Wu’s home computer which featured personal documents and images of his family mixed in with numerous private photos of high end escorts from mainland china.

The nciwww database contained a thousand records from affiliates listing plain text passwords, addresses, names, and some financial data. In another table of information, I found customer service inquiries including messages and contact information. There were also three hundred eighty-five thousand names, serial numbers with dates of purchase, addresses, company names, email addresses, phone numbers, IP addresses and unsalted MD5 hashed passwords. The database also contained full credit card payment details in plain text for two hundred and fifty-eight thousand users between various tables.

 

[gsrcrxsi]

i was just about to post this.

pretty wild.

 

[UltraTaco]

This
Is
CRAZYYY!!!

I can't believe such recklessness is allowed even through the decency of being a human being. Even simple human consciousness should not allow this to happen.

But then again, I'm sure many small stores just throw away paperback copies of their invoices without shredding them or anything.

 

[JrClocker]

Wow

 

[Joe88]

I remember LTT when he went to the NCIX warehouse when they were doing an estate sale he found books of customer data just laying in the middle of the room in a pile and said he hopes they are gonna shred all those.

 

[Alaric]

This sort of thing will continue until it/if it becomes a felony with real jail time, not just a hefty fine that those responsible end up writing off on their taxes. Sit in a cell for for 5 years at minimum and things may change. Unfortunately, lawmakers tend to be in an income bracket where this woulld be an "inconvenience" if it affected them. For a lot of us it would be a crisis of major proportions.

 

[UltraTaco]

Death penalty!!

Need more consequences, yes.