Last month, Security Fix wrote that scam artists were trying to steal the login credentials that law enforcement officers use to access their accounts at Accurint, a database operated by LexisNexis owner ReedElsevier that contains highly detailed and personal files on millions of Americans.
It would seem as though those efforts have been successful.
The company recently sent out an undetermined number of letters to consumers across the country, stating that "...a law enforcement customer's user ID may have been used in an unauthorized manner that allowed some personal information about you to be viewed..." The letter, dated May 25, said thieves had accessed the recipient's personal data, which may have included the victim's name, address, Social Security and/or drivers license number. It also offered free Equifax monitoring through a promotional code.
Sources familiar with the incident said the letters were sent after it was discovered that a number of accounts were compromised at a federal law enforcement agency, though the source declined to say which agency was targeted.
In a statement e-mailed to Security Fix, LexisNexis said: "There is an active and ongoing law enforcement investigation into this case so we won't be discussing the specifics. We have a chief security officer whose team is devoted to constantly monitoring, auditing and securing our systems and our data. From time to time we'll stop intruders trying to access the accounts of our legitimate customers and in cases where data may have been compromised by an intruder, we notify potentially affected consumers."
Read complete story on Brian Kerbs Blog
Last update : 25-06-2007 06:42
|
|
|
|