|
Financial Sector P2P exposure alerts |
|
Polish Bank CISO Data Breach The former Chief Information Security Officer of a Polish bank, leaked out 13,515 confidential files onto the gnutella file sharing network. Redteam contacted the employee and removed the data from the gnutella network. Documents included security plans as well as passwords and account controls. Telecommunications Company (CFO Breach) The Chief Financial Officer of a national telecommunications company, leaked confidential financial data onto the P2P networks. RedTeam identified the source as coming from inside the corporate server. We contacted their IT department, and advised them to remove the P2P application. National Canned Food Company (CEO BREACH) Chief Executive Officer leaked out thousands of confidential files dealing with internal financial memo's and business plans. Also, his personal passport, as well as the passport of senior executives were exposed, in addition to a scanned copy of his credit card. RedTeam left instructions to remove the P2P application from the CEO's home computer on his personal voice mail. The P2P application was removed, but we received no response from the CEO. Texas Based Insurance Provider Texas based insurance supplier leaked out over 3,000 files, containing over 1,000 social
security numbers. The insurance information included corporate applications listing
private business information, dates of birth, social security numbers, and
addresses. RedTeam notified the organization and stopped the transmission of data from the suspect National Document Destruction Corporation A national document shredding corporation leaked out over 1,000 files onto the gnutella file sharing network, including the credit card numbers over over 50 clients. The clients included major Fortune 100 firms, in addition to the US government. We contacted the corporation and ensured the P2P application was removed. Cayman Island Bank A bank in the Cayman islands leaked out over 5,000 documents onto the p2p networks. Almost every document contained backups of financial data sent via fax. The data included international anonymous bank transfers, covered by strict privacy laws in the Cayman Islands. RedTeam contacted the bank, and advised them to remove the p2p application. European Hedge Fund (CEO Breach) A multibillion dollar European hedge fund leaked out thousands of confidential transfers
over the gnutella file sharing network. Also shared, were documents containing Major Financial Institution An employee in NY leaked confidential files onto the gnutella file sharing network, detailing internal meetings with the board of directors. RedTeam contacted a board member and provided the direct contact details of the responsible party in an effort to remove the P2P application. The peer to peer application was removed shortly thereafter. Canadian National Collections Firm Breach 1,577 files were published onto the gnutella P2P network by an employee of a collection firm. The documents included demand letters, dates of birth, bank account data, and social insurance numbers. RedTeam contacted the responsible party and removed the threat. National IT Consulting Firm A senior security consultant with a well known consulting firm, leaked over 1,500 confidential files onto the gnutella file sharing network. This data included the managed security service plans for several Fortune 500 organizations, in addition to government entities. RedTeam contacted the CERT team of the responsible corporation. Soon after, the data was removed from public networks. This is the seventh alert provided to the unnamed Fortune 500 corporation...free of charge. |