This incident has 0 proposed changes. Know of details that have changed? Submit them Showing Incident 15 To_xml

SUMMARY

Large number of credit card numbers accessed by a hacker
Records Unknown
Record Types CCN
Breach Type Hack
Data Family Electronic
Source Outside
Organization Egghead.com
Other Affected/Involved Organizations None
Lawsuit? NO/UNKNOWN
Data Recovered? NO/UNKNOWN
Arrest? NO/UNKNOWN
Submitted By: Anonymous

TIMELINE

DateEvent
None. Add Data Incident Occurred
None. Add Data Incident Discovered By Organization
2000-12-23 Organization Reports Incident
None. Add Data Organization Mails Notifications
None. Add Data Records Recovered
None. Add Data Lawsuit Filed
None. Add Data Arrest Made

SIMILAR INCIDENTS

recordsdateorganizations
0 2001-06-21 ZixIt-Anacom, Anacom Communications
0 2001-11-20 Playboy
0 2004-03-19 BJ's Wholesale Club

MAP OF INCIDENT LOCATION

Address: USA
Have a better address for this incident? Suggest it!

suggest a new reference

REFERENCES

suggest a new attachment

ATTACHMENTS

COMMENTS

by Anonymous on 2009-01-23 (over 3 years ago)

The problem I see is Heartland is being anything but transparent. Releasing the story on inaugural day, and stating "people aren't really at risk." What that statement seems to ignore is data pirates can and do combine artifacts assembled from disparate origin, and it would be a trove to have millions of CC to cross-match against existing partial CC stolen from elsewhere, or existing names, etc. Heartland must be compelled to release the merchant names involved, so the issue can be fully addressed by all involved, not least of which is the public who may be impacted. Finally, any data incident found by 'anomalous billing patterns' is pretty much assured to have been missed by existing method of detection, and heartland has nothing to be proud of in that area either. Visa told them, not the other way around. I want to see heartland held to a higher standard than they are attempting to hold themselves to.

New Comment

captcha
Are you human?

Incidents:

Data Types:

Sectors:

Sources:

Breach Types:

Sponsored By: Rbs Tenable Zecurion
Use of the DataLossDB, and its exports, RSS feeds, reports, or other materials produced on this site by the Open Security Foundation requires authorization and potential licensing arrangements. For more information, please e-mail officers@opensecurityfoundation.org with a brief summary of how you would like to use this information; product, service, research, etc.
© 2005 - 2012, Open Security Foundation, All Rights Reserved.