[Fwd: [Fwd: [Dataloss] eBay's Korean Unit Apologizes for HackingIncident]]

[Arshad Noor <arshad.noor@strongauth.com>]

-------- Original Message --------
Subject: [Fwd: [Dataloss] eBay's Korean Unit Apologizes for Hacking 
Incident]
Date: Thu, 17 Apr 2008 09:37:58 -0700
From: Arshad Noor <arshad.noor@STRONGAUTH.COM>
Reply-To: Arshad Noor <arshad.noor@STRONGAUTH.COM>
Organization: StrongAuth, Inc.
To: ST-ISC@MAIL.ABANET.ORG

10M users and eBay are important enough to warrant forwarding.
Doesn't say where the users are from, or what information about
10% of those users was leaked in the breach.

"Credit card and passwords were not likely included in the leak..".

Now, how do they really know?

Arshad Noor
StrongAuth, Inc.

-------- Original Message --------
Subject: [Dataloss] eBay's Korean Unit Apologizes for Hacking Incident
Date: Thu, 17 Apr 2008 08:16:21 +0000 (UTC)
From: security curmudgeon <jericho@attrition.org>
To: dataloss@attrition.org


Courtesy of W.K.

http://www.telecomskorea.com/index.php?option=com_content&task=view&id=5518&Itemid=2

eBay's Korean Unit Apologizes for Hacking Incident
Written by T_Korea
Thursday, 17 April 2008

U.S. auction giant eBay's Korean unit apologized Thursday for a hacking
incident that lead to leaks of private information of more than 10 million
users of its service.

Park Joo-man, president of Internet Auction, said in an e-mail apology
sent to affected users that the hacking of its website in early February
lead to the leaking of information of some 10,810,000 users as of its
latest tally with the police.

Internet Auction is controlled by the San Jose, California-based eBay.

"We deeply apologize for causing concern resulting from the hacking
crime," Park said.

The company, after a joint investigation with the police, said that more
than 90 percent of the information outflow was of names, IDs and resident
registration numbers. Credit card and passwords were not likely included
in the leak, it added.

The company and the police allege that a user with the ID named "fuckkr"
may have hacked into the company's website using a type of worm via an
overseas IP address.
_______________________________________________
Dataloss Mailing List (dataloss@attrition.org)
http://attrition.org/dataloss

Tenable Network Security offers data leakage and compliance monitoring
solutions for large and small networks. Scan your network and monitor your
traffic to find the data needing protection before it leaks out!
http://www.tenablesecurity.com/products/compliance.shtml

This is the Information Security Committee listserv.  The Acceptable Use 
Policy for this list is located on the Committee's website: 
http:\\www.abanet.org\scitech\ec\isc.  Your e-mail address will only be 
used within the ABA and its entities.
We do not sell or rent e-mail addresses to anyone outside the ABA.

To change your e-mail address or remove your name from any future 
general distribution e-mails you can call us at 1-800-285-2221 or write to:

   American Bar Association
   Service Center
   321 N Clark Street
   Chicago, IL  60610

To unsubscribe send the following in the body of a message to
listserv@abanet.org  - unsubscribe st-isc

To review our privacy statement, go to
http://www.abanet.org/privacy_statement.html.