http://abcnews.go.com/http://abcnews.go.com/
Epsilon Email Breach: What You Should Know Hackers Expose Millions of Email Addresses, Names. Watch For Spam By KI MAE HEUSSNER April 4, 2011— If you're a customer of Walgreens, Best Buy, Citigroup or one of several other major U.S. companies, you might want to put your email inbox on high alert <http://abcnews.go.com/Business/wireStory?id=13286648> . Over the weekend, those retailers were the latest on a growing list of big-name businesses to warn customers <http://abcnews.go.com/US/wireStory?id=13288736> that computer hackers may have accessed their email addresses <http://abcnews.go.com/Technology/wireStory?id=13290451> and names. All of the companies work with the Dallas-based online marketing firm Epsilon, which said Friday that its system had been breached, potentially exposing it's corporate clients' customer information. When reached by ABCNews.com, a spokeswoman said she was unable to comment as the company conducts an investigation and cooperates with authorities. But in its statement <http://www.epsilon.com/News%20&%20Events/Press_Releases_2011/Epsilon_Notifies_Clients_of_Unauthorized_Entry_into_Email_System/p1057-l3> , Epsilon, which sends 40 billion emails annually on behalf of more than 2,500 clients, said a subset of its' clients customer information was compromised in the data breach. "The information that was obtained was limited to email addresses and/or customer names only," the company said. "A rigorous assessment determined that no other personal identifiable information associated with those names was at risk." Affected Customers Could See More Spam, Phishing Attacks, Experts Say J.P. Morgan, Kroger's, Capital One Financial, Barclay's Bank, The College Board and TiVo are among the companies to acknowledge that their customers' data may have been accessed by hackers. (For an up-to-date list of confirmed companies affected by the attack, check out SecurityWeek's list here <http://www.securityweek.com/massive-breach-epsilon-compromises-customer-lists-major-brands> .) While security experts say hackers are usually interested in more sensitive data than people's names and email addresses, they still warn that affected customers should be extra careful with their email. Graham Cluley, a senior technology consultant with the security firm Sophos, said that although the Epsilon breach appears to have hit many well-known companies -- and their millions of customers -- at least the hackers didn't run away with credit card information or home addresses, which could be used to commit identity theft or make unauthorized purchases. Customers with compromised email accounts could expect a surge in annoying spam to their inbox, he said, but the hack could have more insidious effects, too. "The biggest danger here really is that spammers could then target you with email pretending to come from these organizations," Cluley said. "You might get fooled into being phished for your log-in information or being sent malware or a dangerous Web link." Hackers Could Use Stolen Email Addresses Months Down the Road Now that the hackers <http://abcnews.go.com/Entertainment/video/fbi-investigates-celebrity-hackers-13164696> have a treasure trove of verified email addresses, they could use them themselves or sell them on the black market, he said. Even months down the road, customers could get an email masquerading as a message from their bank or credit-card issuer containing poisonous Web links <http://abcnews.go.com/Technology/facebook-twitter-stop-poisoned-links/story?id=13199119> . Once clicked, those links could install malicious code on their computers or try to trick them into giving up valuable information, such as credit card information or log-in data to their banks or social media accounts. To keep your personal information protected, experts say you should be wary of unsolicited messages, especially those with attachments and that ask you for information. Cluley said it's important that if you receive an email from a company (even one that you do business with) that contains a Web link, don't click on it. Instead, go to the website directly and log in from there. "It's a pretty ugly situation from that point of view," he said. "But, at the same time, thank goodness this isn't credit card information." The Associated Press contributed to this report. Copyright © 2011 ABC News Internet Ventures [Non-text portions of this message have been removed] ------------------------------------ -------------------------- Want to discuss this topic? Head on over to our discussion list, [email protected]. -------------------------- Brooks Isoldi, editor [email protected] http://www.intellnet.org Post message: [email protected] Subscribe: [email protected] Unsubscribe: [email protected] *** FAIR USE NOTICE. This message contains copyrighted material whose use has not been specifically authorized by the copyright owner. OSINT, as a part of The Intelligence Network, is making it available without profit to OSINT YahooGroups members who have expressed a prior interest in receiving the included information in their efforts to advance the understanding of intelligence and law enforcement organizations, their activities, methods, techniques, human rights, civil liberties, social justice and other intelligence related issues, for non-profit research and educational purposes only. We believe that this constitutes a 'fair use' of the copyrighted material as provided for in section 107 of the U.S. Copyright Law. If you wish to use this copyrighted material for purposes of your own that go beyond 'fair use,' you must obtain permission from the copyright owner. For more information go to: http://www.law.cornell.edu/uscode/17/107.shtmlYahoo! Groups Links <*> To visit your group on the web, go to: http://groups.yahoo.com/group/osint/ <*> Your email settings: Individual Email | Traditional <*> To change settings online go to: http://groups.yahoo.com/group/osint/join (Yahoo! ID required) <*> To change settings via email: [email protected] [email protected] <*> To unsubscribe from this group, send an email to: [email protected] <*> Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/
