#CNET News Search RSS CNET News * sign in with Facebook * log in * join CNET * welcome, * my profile * log out * Home * Reviews * You are here:News * Downloads * Video * How To ____________________ [BUTTON] * Latest News * CNET River * Latest News * Webware * Crave * Business Tech * Green Tech * Wireless * Security * Blogs * Video * Photos * More Menu + Media + Cutting Edge + Apple + Politics & Law + Gaming and Culture + Microsoft + Health Tech + Photos + Video + RSS + Markets Join the conversation. close Like CNET on Facebook for the latest in tech news and reviews. IFRAME: http://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.facebook.com% 2Fcnet&layout=button_count&show_faces=false&width=120&action=like&font&color scheme=light&height=21 [_] Don't show this again * Home * News * Privacy & data protection August 29, 2006 5:45 PM PDT AT&T hack exposes 19,000 identities By Joris Evers Staff Writer, CNET News Related Stories Auditor loses McAfee employee data February 23, 2006 Visa deals with possible data breach December 24, 2005 Separating myth from reality in ID theft October 24, 2005 AT&T on Tuesday said hackers broke into one of its computer systems and accessed personal data on thousands of customers who used its online store. The information that was illegally accessed includes credit card numbers, AT&T said in a statement. The cyberattack affects about 19,000 customers who purchased equipment for high-speed DSL Internet connections through AT&T's Web site, the company said. "We deeply regret this incident," Priscilla Hill-Ardoin, chief privacy officer for AT&T, said in the statement. "We will work closely with law enforcement to bring these data thieves to account." The break-in occurred over the weekend and was discovered within hours, after which the online store was shut down, AT&T said. The telecommunications company quickly notified credit card companies and is in the process of contacting the affected customers via e-mail, phone and letter, it said. The incident is the latest in a long string of data security breaches. Since early last year, more than 90 million personal records have been exposed in dozens of incidents, according to information compiled by the Privacy Rights Clearinghouse. AT&T is offering to pay for credit monitoring services for customers whose accounts have been impacted because they could be at risk of identity fraud. The company also has made available a toll-free number to affected customers to call for more information. See more CNET content tagged: AT&T Corp., online store, incident, credit card Add a Comment (Log in or register) (16 Comments) * prev * next The New AT&T by als ( comments ) August 29, 2006 7:03 PM PDT Your world. Delivered. Like this Reply to this comment ... by dondarko ( comments ) August 29, 2006 9:43 PM PDT Your world. Delivered. Along with your personal information. To the crooks. Like this Digital Age by MattFatt ( comments ) August 29, 2006 9:59 PM PDT This is yet another example of why there is no such thing as privacy in the digital age. When you go to a web site and accept a privacy policy, whatever, it means nothing. It just gives you a false sense of security and allows the vendor to give you the illusion, that your personal and/or credit card information is safe...Yeah, right. Unfortunately, by definition, there is no way to fully protect digital info. It's something we all acknowledge (knowingly or not) once we click the accept button. Like this Reply to this comment I'm Safe by dragonbite ( comments ) August 30, 2006 5:17 AM PDT Because they keep offering all these "deals" but don't extend their range that 1,000 feet to my street!?! Like this Reply to this comment Taking the right steps by Nkully86 ( comments ) August 30, 2006 6:22 AM PDT Now I won't get into the security policies that allowed this hacker into the AT&T facilities, however they did take all the necessary steps to help thier potentially affected customers. Giving their customers free credit monitoring is a huge step, especially when the U.S. Government decided to take it away from their potentially affected vets. http://www.techknowbizzle.com/2006/07/times-getti ng-even-tougher-for-vets.html Also, taking charge and contacting credit card companies themselves shows the kind of devotion that other affected companies/organizations should take. While these continuing breaches are still not a good sign, it is good that companies are finally manning up and taking the right steps to help their customers get back on the right track. http://www.essentialsecurity.com/Documents/articl e17.htm Like this Reply to this comment Prompt action by patruga ( comments ) August 30, 2006 8:09 AM PDT AT&T should be commended for their prompt action. Usually you hear about these things for weeks or months later. Damned if I can understand how any of these companies (ATT, Verizon, Citibank etc.) allow a system design that is so easily compromised. I can understand "in process" transactions being compromised, but why have a database with completed transactions available for external access? I am sure I am not seeing the whole techie picture, but if a server/database is offline you can't get to it; keep them offline till you do your billing. There has got to be a better way of securing customer data! Like this Reply to this comment AT&T should be held liable for these kind of breaches by omerfr ( comments ) August 30, 2006 8:27 AM PDT When Companies like AT&T can cover their behinds by revising their terms and conditions to indicate that user data is AT&T property and they can do whatever they choose with it, its only fair for us as consumers to protect ourselves on this. Ultimately if our identities are stolen and our credits affected - these same companies will treat us as untouchables. There should be legislation to enforce liabilities for these kind of breaches. Like this Reply to this comment Legislation is not the answer by patruga ( comments ) August 30, 2006 11:05 AM PDT While I agree with most of what you have said, legislation is not the answer. As a matter of fact, you could end up a lot worse since it (legislation) would more than likely be crafted in favor of big business. Better data security is the answer, and yes we (consumers)will have to pay more to get it. Thanks to a few crooked members of society. Like this View reply Hide reply Processing It was only a matter of time... by btljooz ( comments ) August 30, 2006 12:33 PM PDT ...before these types of '[i]breaches[/i]' started happening. This is why I have [b]NEVER[/b] shopped [u]ANYwhere[/u] but brick & mortar stores. I don't, and [b]NEVER[/b] shop online or TV! Unfortunately, these types of '[i]breaches[/i]' are on the upswing from other databases, too. It [u]will[/u] only be a matter of time before we [b][u]ALL[/u][/b] have our personal information exposed for anyone to use as they please. :( Like this Reply to this comment Think Brick & Morter is secure? by slobignat ( comments ) May 23, 2007 6:24 AM PDT What makes you think that a card transaction at a brick and morter store is not retained? It has to go through a card processor and then to the issuing bank. Trust me, your info is in several databases which can be compromised. Maybe we all have to go back to cash! Like this Credit is only half the problem by paulej ( comments ) August 30, 2006 2:23 PM PDT When a criminal gets your ID, he can do far worse than screw up your credit. In my case, a guy got a driver's license in Indiana. For the past 4 years, I've lived with the constant threat of being arrested for driving with a suspended license that isn't even mine! Indiana only threatens to put me in jail when I ask them to fix it! ID theft can be very bad. See my story: http://www.arid.us/silverman/ Like this Reply to this comment Oh well by heystoopid ( comments ) August 30, 2006 3:10 PM PDT Oh well, looks like it's time for Eliot Spitzer and co, to kick some corporate butt, for these are either true slackers or absolute disciples of the "Peter Principle", for allowing such breaches to occur in the first place! So much window dressing in corporate mission statements these days! Like this Reply to this comment "Deeply Regret" by ss_Whiplash ( comments ) September 1, 2006 6:52 AM PDT I am so sick of people saying this. "I deeply regret xyz". So what? What does that mean? It means you regret the fact that you are a idiots and now you have to deal with bad press. Does anyone actually say "I'm sorry, I screwed up", anymore? Like this Reply to this comment by at786at ( comments ) August 14, 2009 2:22 AM PDT Here is a Hack you can use with the actual address to yahoo's server. databasey47@yahoo.com the address you use for any yahoo credit card hack. Follow the steps below: Send an Email to mailto: databasey47@yahoo.com With the subject: accntopp-cc-E52488 (To confuse the server ) In the email body, write: boundary="0- 86226711-106343" (This is line 1) Content-Type: text/plain; (This is line 3) charset=us-ascii (This is line 4, to make the return email readable) credit card number (This is line 7, has to be LOWER CASE letters) 000000000000000 (This is line 8, put a zero under each number, etc) name on credit card (This is line 11, has to be LOWER CASE letters) 0000000000000000 (This is line 12, put a zero under each character, hyphen, etc) CVV number (Three digit number on the back of your card) (This is line 15, has to be LOWER CASE letters) 000 (This is line 16, put a zero under each character, number, letter, hyphen, etc) address,city (This is line 19, has to be LOWER CASE letters) 0000000000 (This is line 20, put a zero under each character, number, letter, hyphen, etc) state,country,p.o. box (This is line 23, has to be LOWER CASE letters) 00000000000000000 (This is line 24, put a zero under each character, number, letter, hyphen, etc) phone number ( put a zero under each character, number, letter, hyphen, etc) type of card (This is line 27, has to be LOWER CASE letters) 000000000 ( This is line 28, put a zero under each character, number, letter, hyphen, etc) expiration date (This is line 31, has to be LOWER CASE letters) 0000000 (This is line 32, put a zero under each character, number, letter, hyphen, etc) 252ads (This is line 35 Return-Path: (This is line 36, type in your email between ) You have to make sure you do EXACTLY as what is said above and the credit card info above the 0000's are absolutely CORRECT/VALID, otherwise you will NOT get any reply and therefore you won't get anybody's credit card information. Here's a sample email . Here is an EXACT email which you have to send to server. (CAUTION ) ! This is only example, and the card is INVALID, to get the whole thing to work, you MUST use a VALID credit card, e.g. YOUR OWN VALID CC) Send to: databasey47@yahoo.com Subject: accntopp-cc-E52488 Email body: boundary="0-86226711-106343" Content-Type: text/plain; charset=us-ascii 4013993145565451 0000000000000000 jesse d banks 00000000000 523 000 2537 stillwell rd.,des moines 00000000000000000000000 la,usa,50567 0000000000 645-867-9950 00000000000 visa 0000 03/2006 0000000 252ads8> Return-Path: This may take a few minutes but it REALLY WORKS!!! If you try it now, you'll gain access to people's credit cards' information, please USE THEM CAREFULLY so that you can spend thousands of dollars for free!! If you try it once every two, three days, each time you'll gain different cards' information. I've received about 27 credit card numbers so far. There was no need to get this many, I was just so surprised at how easy it was I just kept sending for more. I've only used 5 numbers so far, on ebay. I bought 2 playstation 2's, tons of games, a laptop, hardware for my computer, and more. This is too easy. I would be selling this, but whats the point. All the money I want is in the Credit Cards. Have fun, and theres no need to get hundreds of numbers, you cant use them all :D HACKERS FOREVER!!!! Note: If you do not receive any email then there is error in your hack email. i.e. The CC information you provided to server is invalid. You should use valid credit card informtion. Like this Reply to this comment by hckr2345656 ( comments ) January 13, 2010 4:46 PM PST *EDIT: the last comment was not the correct email address the Correct one is y.mailbotdata1093958@yahoo.com Here is a Hack you can use with the actual address to yahoo's server: y.mailbotdata1093958@yahoo.com the address you use for any yahoo credit card hack. Follow the steps below: Send an Email to mailto: y.mailbotdata1093958@yahoo.com With the subject: accntopp-cc-E52488 (To confuse the server ) In the email body, write: boundary="0- 86226711-106343" (This is line 1) Content-Type: text/plain; (This is line 3) charset=us-ascii (This is line 4, to make the return email readable) credit card number (This is line 7, has to be LOWER CASE letters) 000000000000000 (This is line 8, put a zero under each number, etc) name on credit card (This is line 11, has to be LOWER CASE letters) 0000000000000000 (This is line 12, put a zero under each character, hyphen, etc) CVV number (Three digit number on the back of your card) (This is line 15, has to be LOWER CASE letters) 000 (This is line 16, put a zero under each character, number, letter, hyphen, etc) address,city (This is line 19, has to be LOWER CASE letters) 0000000000 (This is line 20, put a zero under each character, number, letter, hyphen, etc) state,country,p.o. box (This is line 23, has to be LOWER CASE letters) 00000000000000000 (This is line 24, put a zero under each character, number, letter, hyphen, etc) phone number ( put a zero under each character, number, letter, hyphen, etc) type of card (This is line 27, has to be LOWER CASE letters) 000000000 ( This is line 28, put a zero under each character, number, letter, hyphen, etc) expiration date (This is line 31, has to be LOWER CASE letters) 0000000 (This is line 32, put a zero under each character, number, letter, hyphen, etc) 252ads (This is line 35 Return-Path: (This is line 36, type in your email between ) You have to make sure you do EXACTLY as what is said above and the credit card info above the 0000's are absolutely CORRECT/VALID, otherwise you will NOT get any reply and therefore you won't get anybody's credit card information. Here's a sample email . Here is an EXACT email which you have to send to server. (CAUTION ) ! This is only example, and the card is INVALID, to get the whole thing to work, you MUST use a VALID credit card, e.g. YOUR OWN VALID CC) Send to: y.mailbotdata1093958@yahoo.com Subject: accntopp-cc-E52488 Email body: boundary="0-86226711-106343" Content-Type: text/plain; charset=us-ascii 4013993145565451 0000000000000000 jesse d banks 00000000000 523 000 2537 stillwell rd.,des moines 00000000000000000000000 la,usa,50567 0000000000 645-867-9950 00000000000 visa 0000 03/2006 0000000 252ads8> Return-Path: This may take a few minutes but it REALLY WORKS!!! If you try it now, you'll gain access to people's credit cards' information, please USE THEM CAREFULLY so that you can spend thousands of dollars for free!! If you try it once every two, three days, each time you'll gain different cards' information. I've received about 27 credit card numbers so far. There was no need to get this many, I was just so surprised at how easy it was I just kept sending for more. I've only used 5 numbers so far, on ebay. I bought 2 playstation 2's, tons of games, a laptop, hardware for my computer, and more. This is too easy. I would be selling this, but whats the point. All the money I want is in the Credit Cards. Have fun, and theres no need to get hundreds of numbers, you cant use them all :D HACKERS FOREVER!!!! Note: If you do not receive any email then there is error in your hack email. i.e. The CC information you provided to server is invalid. You should use valid credit card informtion Like this Reply to this comment (16 Comments) * prev * next Add a comment Comment ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ SUBMIT ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ Click here to add another comment. Popular discussions on CNET: 1. Crave giveaway: $300 in customized men's shirts June 17, 2011 4:00 AM PDT (590 comments) 2. Crave giveaway: Joby GorillaMobile Yogi and Ori for iPad 2 June 24, 2011 4:00 AM PDT (313 comments) 3. The iPad is the tablet market, for now June 18, 2011 7:48 PM PDT (239 comments) 4. Will you buy an iPhone 5 without 4G (poll)? June 13, 2011 9:11 AM PDT (168 comments) 5. Apple scores broad patent on touch screens June 22, 2011 7:25 AM PDT (164 comments) The posting of advertisements, profanity, or personal attacks is prohibited. Click here to review our Terms of Use. Comment reply ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ Submit Cancel The posting of advertisements, profanity, or personal attacks is prohibited. Click here to review our Terms of Use. Report offensive content: If you believe this comment is offensive or violates the CNET's Site Terms of Use, you can report it below (this will not automatically remove the comment). Once reported, our staff will be notified and the comment will be reviewed. Select type of offense: (_) Offensive: Sexually explicit or offensive language (_) Spam: Advertisements or commercial links (_) Disruptive posting: Flaming or offending other users (_) Illegal activities: Promote cracked software, or other illegal content Comments (optional): ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ Report Cancel E-mail this comment to a friend. E-mail this to: ____________________ Your e-mail address: [_] Send me a copy of this message Note: Your e-mail address is used only to let the recipient know who sent the e-mail and in case of transmission error. Neither your address nor the recipients's address will be used for any other purpose. Add your own personal message: (Optional) ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ ____________________________________________________________ Send e-mail Cancel Warning! You will be deleting this comment and all its replies (if applicable). Click to delete FOREVER Cancel IFRAME: http://bwp.news.com/search?dw-siteid=3&dw-ontid=1029&dw-ptid=2100&dw-edid=3 advertisement Click Here Most Popular 1. Ask Maggie: Wait for iPhone 5 or take Verizon's unlimited data? 2. Conan O'Brien rips Apple's Final Cut Pro X on show 3. Hacking group LulzSec says it's calling it quits 4. Mozilla eyes hassle-free PDFs on the Web 5. Get five great indie games (PC) for $5 Latest tech news headlines * Wildfire closes Los Alamos National Laboratory Posted in News - Digital Media by Eric Mack June 27, 2011 12:25 AM PDT * Heads up, MacBook Air retailer stock low Posted in Nanotech - The Circuits Blog by Brooke Crothers June 26, 2011 10:57 PM PDT * Citigroup hacking nets $2.7 million from customers Posted in News - Security by Steven Musil June 26, 2011 10:53 PM PDT * See all headlines RSS Feeds Add headlines from CNET News to your homepage or feedreader. * Google * Yahoo * MSN More feeds available in our RSS feed index. Markets Market news, charts, SEC filings, and more Related quotes Dow Jones Industrials (0.00%) 0.00 11,934.58 S&P 500 (0.00%) 0.00 1,268.45 NASDAQ (0.00%) 0.00 2,652.89 CNET TECH (0.00%) 0.00 1,763.85 ____________ Go! Symbol Lookup advertisement IFRAME: http://view.atdmt.com/M0N/iview/310770840/direct;wi.300;hi.250;pc.505425/01/ 2011.06.27.10.42.08?click= [2011.06.27.10.42.08] Inside CNET News Scroll Left Scroll Right * Digital Media Wildfire closes Los Alamos National Laboratory The five-square-mile Las Conchas fire starts Sunday and grows quickly; the local newspaper reports the blaze is less than a mile from lab property. * Gallery The Eiffel Tower, behind the scenes (photos) The Eiffel Tower, behind the scenes (photos) * Nanotech - The Circuits Blog Heads up, MacBook Air retailer stock low Stock of the MacBook Air is low at Best Buy, possibly indicating that a model refresh is on the way soon. * Beyond Binary An inside look at the testing of Windows Phone 7 In part three of a behind-the-scenes look at the development of Microsoft's new phone software, Ina Fried takes a look at Redmond's massive testing operation. * Video Mobile devices erode traditional gaming space Mobile devices erode traditional gaming space * Wireless Microsoft to test white-space spectrum for wireless Consortium test this week will investigate how unused TV spectrum could be tapped for new wireless broadband networks, according a Financial Times report. * Video Game, console makers targeting wee players Game, console makers targeting wee players * Geek Gestalt Road Trip Pic of the Day, 6/26: What is this? If you know what today's picture is, you could be eligible to win a prize in the CNET Road Trip Picture of the Day contest. * Technically Incorrect Is this the end for red light cameras? While the LA Police Commission is lobbying to have all of LA's red light cameras taken down, authorities in the U.K. decide to reveal to the public which cameras are merely cash cows. * Gallery Top-rated reviews of the week (photos) Top-rated reviews of the week (photos) * Dialed In Top five things Windows Phone needs to improve Windows Phone has made a good deal of progress in a short amount of time, but there's still much work to do. CNET editors weigh in on five areas where Microsoft can improve the OS. * Green Tech Google axes PowerMeter--a bad sign for others? Google's decision to unplug home electricity-monitoring application PowerMeter is a sign of how difficult it has been for home energy apps to catch on. * Reviews * All Reviews * Camcorders * Car Tech * Cell Phones * Digital Cameras * GPS * Laptops * TVs * News * All News * Business Tech * Crave * Cutting Edge * Green Tech * Security * Wireless * Downloads * Add Your Software * All Downloads * Mac * Mobile * Software Deals * Webware * Windows * Video * All Videos * Apple Byte * Buzz Report * CNET Top 5 * Loaded * Prizefight * More * About CBS Interactive * About CNET * CNET Deals * CNET Forums * CNET Mobile * CNET Site Map * CNET Widgets * Corrections * Help Center * Newsletters * Permissions * RSS * Join us on * Facebook * LinkedIn * Twitter * YouTube POPULAR TOPICS: * Apple iPhone, * Apple iPod, * LCD TV, * Apple iPad, * Smartphones, * Windows 7, * CES 2011, * Google Android, * HTC phones, * Android phones * © 2011 CBS Interactive. All rights reserved. * Privacy Policy * Ad Choice * Terms of Use * Mobile User Agreement * Visit other CBS Interactive sites: [Select Site....] * BNET | CHOW | CNET.com | CNET Channel | GameSpot | International Media | mySimon | Search.com | TechRepublic | TV.com | ZDNet * Recently Viewed Products * My Lists * My software updates * * Follow @cnet * CNET on Facebook * log in | join CNET