Information Security
Nicolas Jacobsen was charged with intruding into the company's internal network in January 2005. Reports indicated that for about a year Jacobsen had access to customer passwords, e-mail, address books, Social Security numbers, birth dates, and Sidekick photos. Affected customers included members of the United States Secret Service. Secret Service informant identified Jacobsen as part of "Operation Firewall" which provided evidence that Jacobsen had attempted to sell customer information to others for identity theft. T-Mobile USA and the Secret Service did not elaborate on the methods Jacobsen used to gain access but sources close to the case indicated that Jacobsen exploited an unpatched flaw in the Oracle WebLogic Server application software used by the company. Additional SQL injection vulnerabilities with the company's web site were reported by Jack Koziol of the InfoSec Institute.
T-Mobile offers access to voice mail without the input of a password by default. Parties acting in bad faith may be able to access such voice mailboxes via Caller ID spoofing. To avoid this possibility, T-Mobile recommends that all customers password protect their mailboxes, but still offers the no password configuration by default due to customer demand.
On June 6, 2009, a message posted from an email account "pwnmobile_at_Safe-mail.net" to the Full Disclosure mailing list claimed that the company's network had been breached and showed sample data. The sender offered "databases, confidential documents, scripts and programs from their servers, financial documents up to 2009" to the highest bidder. On June 9, the company issued a statement confirming the breach but stating that customer data was safe. It claimed to have identified the source document for the sample data and believe it was not obtained by hacking. A later statement claimed that there was not any evidence of a breach.
Read more about this topic: T-Mobile USA
Famous quotes containing the words information and/or security:
“We hear a great deal of lamentation these days about writers having all taken themselves to the colleges and universities where they live decorously instead of going out and getting firsthand information about life. The fact is that anybody who has survived his childhood has enough information about life to last him the rest of his days.”
—Flannery O’Connor (1925–1964)
“...I lost myself in my work and never felt that marriage would give me the security I wanted. I thought that through the trade union movement we working women could get better conditions and security of mind.”
—Mary Anderson (1872–1964)