WHID 2007-06: Hackers swipe seed company's customers' data
11,500 credit card numbers have been stolen from the web site of Johnny's Selected Seeds a small ($13M in revenue per annum) on line vendor of seeds in Main. 20 of these are known to have been abused. As usual, the hack was discovered because of fraudulent use of stolen credit cards rather than security measures used protect the web site.
The direct cost of the breach, informing customers, researching the incident and upgrading the protection of the web site cost the company tens of thousands of dollars.
Additional information:
- Hackers swipe seed company's customers' data [Kennebec Journal, Mar 3 2007]
- Maine Seed Company Website Hacked: Demonstrates SMB Vulnerability & Questions Hacker Safe Seals [Realtime IT compliance, Mar 3 2007]
Attack Method:
Incident Outcome:
