Fox News security hole exposes 1.5 million users' personal information

Monday, July 23, 2007

A security hole on the Fox News web server Sunday exposed sensitive content to the public, including login information that allowed hackers to access names, phone numbers, and email addresses of at least 1.5 million people.

Wikinews has learned that an FTP server belonging to publishing company Ziff-Davis could be accessed with a username and password found on the Fox News site, with customer details among the internal data publicly available.

The FTP site, used for collaboration between different global aspects of Ziff-Davis business, contains data ranging from expense sheets to resumes to opt-out lists used by customers who wish to avoid receiving unsolicited emails. Many of the compromised files make reference to Acxiom, a data management company that, in 2003, experienced a similar theft of personal information. Unlike in the 2003 breach, however, it is not believed that the files exposed due to the Fox News security oversight contain customer Social Security numbers or bank accounts. However, telephone and address details appear in the data. A number of the email addresses appearing on the list end in .gov or .mil, suggesting the named individual is a member of the U.S. government or military, respectively.

Internet vandals were quick to leave their mark on the compromised Ziff-Davis server, uploading pornography and claiming to have come from popular Internet comedy site eBaum's World.

The Ziff-Davis access details are believed to have been on the Fox News server as a part of collaboration between the two media companies for technology news coverage.

Security expert David Utter says the Fox News mistake is an example of "sloppiness", though the hole had been patched by noon Monday. Neither Fox News nor Ziff-Davis have commented on the breach.

Sources

Wikinews

This article features first-hand journalism by Wikinews members. See the collaboration page for more details.

Wikinews

This article features first-hand journalism by Wikinews members. See the collaboration page for more details.

Jeremy Kirk. "Fox News Server Found Unsecured" — PC World Online, July 23, 2007
David Utter. "Fox News Forgets About Directory Security" — SecurityProNews, July 23, 2007

Share this:

This page is archived, and is no longer publicly editable.

Articles presented on Wikinews reflect the specific time at which they were written and published, and do not attempt to encompass events or knowledge which occur or become known after their publication.

Got a correction? Add the template {{editprotected}} to the talk page along with your corrections, and it will be brought to the attention of the administrators.

Please note that due to our archival policy, we will not alter or update the content of articles that are archived, but will only accept requests to make grammatical and formatting corrections.

Note that some listed sources or external links may no longer be available online due to age.