Chinese spammers target 1,200 US, UK firms
Database breaches put personal data at risk
Regcast training : Hyper-V 3.0, VM high availability and disaster recovery
The Royal Institute of British Architects' (RIBA) members database was hacked at the weekend, causing the institute to close access to the members' area, which remains shut.
RIBA reports that 1,200 other organisations in the US and UK have also been attacked in a similar way, but "neither the RIBA nor other organisations contacted have yet found any evidence of fraudulent activity or attempts to extract information from the databases".
According to a RIBA spokeswoman, the attacker "planted a web address on the databases. The source has been traced to an organisation in China known for its large scale spamming. We cannot be certain of the purpose but it is likely to be the capture of email addresses."
Technical staff at the institute spotted the problem and closed access to the database as a precaution.
RIBA sent an email on Thursday warning its 40,000 members to keep an eye on bank accounts and credit card statements that may have been used for payments to RIBA. However, it assured them there is no evidence that any information was stolen. It has also reported the incident to the Metropolitan Police.
The institute refused to comment on whether the database was encrypted or password protected.
RIBA chief executive Richard Hastilow said: "We are taking urgent action to upgrade the protection of our systems against this latest type of threat." ®
COMMENTS
What the hell do you know?
Particularly since "planted a web address on the databases" doesn't even mean anything, at least in English.
We were miss quoted you plank.
A web address hosting a Java script was written to a number of fields within the database. With a little digging we found that on the weekend this occurred, a hell of a lot of other sites were also effected.
I've Banned Many Ranges
I've also banned all of china. I also went a bit further and banned anything outside the US! : P My company is not international and therefore we don't need anything outside the US... the only thing that comes up is troubleshooting every now and then to allow certain websites, for example the register. : D
Who flung dung?
You cannot ban us, we are the people's republic of china!
IT infrastructure monitoring strategies
Agentless Backup is Not a Myth
Top 10 SIEM implementer’s checklist
Steps to Take Before Choosing a Business Continuity Partner
Requirements Checklist for Choosing a Cloud Backup and Recovery Service Provider
