3800 Credit Cards extruded from Guidance Software PDF  | Print |  E-mail

Guidance Software had a pretty nasty extrusion event last month; losing 3800 credit cards according to Washington Post staffer, Brian Krebs. I find it ironic that Guidance specializes in forensics software for law enforcement agencies; according to their Web site: Guidance Software was founded with a clear purpose: to develop solutions that search, identify, recover and deliver digital information in a forensically sound and cost-effective manner.

Guidance alerted customers to the extrusion incident in late December, saying that hackers had broken into a company database and extruded over 3,800 customer credit card numbers. Guidance said they are working with the U.S. Secret Service on a more detailed investigation.

John Colbert, Guidance CEO reacted declined to acknowledge personal responsibility, saying that: "This certainly highlights the fact that intrusions can happen to anybody and that nobody should be complacent about security,".

Guidance stored customer records in unencrypted databases, and indefinitely retained customers' "card value verification" (CVV) numbers, the three-digit codes on the back of credit cards that are meant to protect against fraud in online and telephone sales, according to Colbert and the notification letter sent to customers.

 
Software Associates - Business security specialists for hi-tech firms