Anti-sec/anon hack stratfor

[Callisto]

I don't think rich people count as the general public in their eyes, but who knows?

This still could potentially indirectly fuck up the lives of many people, not just the rich people whose info was posted. It's one thing to expose a company's internal business records/emails/proof of shady dealings and whatnot, but I really disagree with the posting of personal info regardless of whose it is. On top of that I was under the impression that STRATFOR wasn't exactly a cloak & dagger operation, not sure if their clients are really doing anything that bad to warrant doing this to them. This kinda seems like it was done just to be dicks.

[Sonomaa]

yeah posting the link to that shit was dumb and stupid on so many levels, nobody needs to have to look at it, since nobody here should be stupid enough to try and do anything with it

I have mind to give you a slap the ban up for a few days moron

[Dimmauk]

If your info got posted, could you sue everyone?

[Correction]

Odd that anon would give away personal information?

Anon never lies about its stated purpose right?

[Mazmaz]

Did you all miss the part where it's Anti-sec and not Anonymous? Or do people still think those two are the same?

[Ksandra]

Did you all miss the part where it's Anti-sec and not Anonymous? Or do people still think those two are the same?

op put anti-sec in the title, but that is never mentioned in the article they linked (article says anonymous). Do you have one that says it was anti-sec and not anon?

[Callisto]

Yeah lol...the article says Anon specifically twice in the first few lines, that's why I said I was confused on thinking I saw Anon say they weren't involved in this.

[Mazmaz]

http://www.techspot.com/news/46822-a...nt-emails.html
http://www.tgdaily.com/security-feat...tional-attacks

Seems news organizations are confused by it and mix the two up all the time.

[Ddz]

What are the fines for PCI compliance violations?

[djzombie]

What are the fines for PCI compliance violations?

https://financial.ucsc.edu/Pages/Sec...Penalties.aspx

Penalties for PCI non-compliance

The Payment Card Industry has established fines of up to $500,000 per incident for security breaches when merchants are not PCI compliant.

In addition, it is required that all individuals whose information is believed to have been compromised must be notified in writing to be on alert for fraudulent charges. As such, the potential cost of a security breach can far exceed $500,000 when the cost of customer notification and recovery is calculated.

Potential cost of a security breach

* Fines of $500,000 per incident for being PCI non-compliant
* Increased audit requirements
* Potential for campus wide shut down of credit card activity by our merchant bank
* Cost of printing and postage for customer notification mailing
* Cost of staff time (payroll) during security recovery
* Cost of lost business during register or store closures and processing time
* Decreased sales due to marred public image and loss of customer confidence

Taken from a university site, thats why it references campuses

So 500,000 per incident of having a security breach caused by non-compliance. 75,000 incidents of customer cc info leaked

500,000*75,000 = 37,500,000,000

Though I'm not sure if they count each customer as a separate incident.

[The Blackrose]

In this case, incident has to mean number of breaches where information was not encrypted. 37 billion USD on a single breach would be a stupid-crazy fine. Might as well push for infinity dollars.

Although it wouldn't be a bad idea to slap them with a $ x n account fine either, because that amount of accounts compromised is fucking retarded.

Question becomes how many times was the system accessed? Does multiple logins/access points constitute multiple incidents, or one big incident? (leaning towards latter)

[djzombie]

This is old, but you're probably right based on this.

http://www.braintreepayments.com/blo...it-card-breach

TJX is now the poster child for credit card data breaches. Starting in July 2005, hackers spent 18 months exploiting weak wireless network security outside of thousands of TJX owned stores and downloaded nearly 100 million credit card numbers and other personal information. TJX recently estimated that the breach will cost them $118 million. Others, such as Forrester, estimate it will cost them $1.35 billion after including legal fees, call center costs, regulatory fines, etc.

A Forrester report determined that the cost per breached record will be anywhere from $90 to $305.

So using the high number from that estimate, based on per breached record, 305*75000 = 22,875,000