Equifax Piracy: Admin / Admin Administrator ID
The US credit company Equifax may be the victim of a new security breach after it was revealed that its Argentine database had "admin / admin" as the username and password.
As a reminder Equifax was the subject of a computer piracy of its database at the beginning of September. It is supposed to be specialized in the protection and analysis of personal and financial data of customers who apply for credit from a bank or a credit institution. The company has about 140 million customers, almost half of the US population.
According to the company, the pirates would have obtained the names, dates of birth, social security numbers, addresses and driver's license numbers of their customers. The numbers of 209,000 credit cards were also pirated as well as many sensitive credit information of nearly 182,000 people.
Since this piracy researchers of the American company Hold Security are investigating on Equifax. They said that its Argentine structure is also very easily pirated.
An employee-only portal known as Veraz became accessible to researchers, who typed admin / admin as username and password, giving them access to the personal data of 111 employees.
Another page contained 715 customer complaints from previous years, each with unencrypted clear text security numbers.
The only thing that protected this highly confidential personal information was what the security advisor of Hold Brian Krebs called:
"The easiest combination of passwords to guess"
"For me, this is just negligence," added founder Alex Holden.
"At the time, their approach to security was appalling, and it is hard to believe that the rest of their operations are better secured. "
Krebs has described the company's work as "sloppy" because officials simply put the compromise portal offline.
A separate investigation is currently underway for insider trading involving three investors who sold shares of the company for a value of $ 18 million between the date of discovery of piracy and public disclosure.