AfterDawn: News

VeriSign was hacked repeatedly in 2010

VeriSign, the registry for the .com and.net top-level domains, has admitted today it was hacked repeatedly in 2010.

More surprisingly, top-level managers were not notified about the data breaches until 2011, added the company in its statement.



Says the company in their recent 10-Q SEC filing: "In 2010, VeriSign faced several successful attacks against its corporate network in which access was gained to information on a small portion of our computers and servers."

It is unclear what data was compromised or lost.

VeriSign also noted that "given the nature of such attacks, we cannot assure that our remedial actions will be sufficient to thwart future attacks or prevent the future loss of information."

Written by: Andre Yoskowitz @ 2 Feb 2012 21:32

• Previous article

• Facebook's graffiti artist is now incredibly rich

• Next article

• Feds take down FirstRow sports streaming

• 6 comments

• keola37

  Man...
  
  the future is lame
  

  2.2.2012 21:57 #1

• Mez

  This does not make me feel comfortable.

  3.2.2012 09:18 #2

• LordRuss

  Wait a minute... Then how the hell do they even know if they got hacked? They don't even know what data got hit, they don't what data (if any) was removed or compromised (if they're telling the truth in the first place), just that some smaller servers were breached.
  
  You mean to tell me they don't even have some form of redundancy to match against what they had in order to quick match against what 'was' as a reference? Just to cover their ass in a liability suit I would have at least had that much in place.
  
  This reeks of an inside job & an embezzling scandal about to break if you ask me.
  

  http://onlyinrussellsworld.blogspot.com

  3.2.2012 09:53 #3

• phobet

  It sounds like Verisign has discovered evidence of intruders(s) on their network, but at this time, they are not fully aware of what the intruders accessed or had access to.
  

  9.3.2012 08:57 #4

• Mez

  Yes,they may know an account that only would have one access had 2 sessions at the same time. They can't tell which session accessed which data.

  9.3.2012 09:41 #5

• phobet

  Originally posted by Mez: Yes,they may know an account that only would have one access had 2 sessions at the same time. They can't tell which session accessed which data. Hopefully, they encrypted their important data. If they just discovered their network was compromised, it may take a while to do a forensic analysis on the network, to determine the *amount* of compromise.
  

  9.3.2012 10:10 #6