Hackers stole database and card numbers
An e-commerce organization processing millions of transactions was breached after storing passwords in plaintext and failing to encrypt client secrets. Hackers gained root access to production servers and exfiltrated the codebase, databases, and card numbers because security was neglected for years.
- Field
- computer security
- What they did
- An e-commerce organization was hacked, allowing attackers to steal all client data, including credit card numbers, and gain full access to the codebase.
- Why it matters
- The security issues were discovered only after this incident, despite employees noting that previous hacks had occurred and that clients had independently found vulnerabilities.
#security#hacking#pci#authentication



