Feeds

Fired Gucci IT worker accused of tearing up network

Suits you, Sir

Internet Security Threat Report 2014

A fired network engineer has been charged with mounting a revenge hack attack against the American branch of Gucci.

Sam Chihlung Yin, 34, of Jersey City, New Jersey, allegedly wreaked havoc on the network of the US branch of the Italian luxury good retailer around six months after he was dismissed by Gucci in May 2010. The November 2010 assault shut down servers and deleted data, causing damage and lost productivity costs estimated at $200,000 in the process.

Gucci lost access to documents and email for nearly 24 hours, while other documents and emails were permanently lost. The attack relied on the use of a fictitious VPN access account allegedly established by Yin while still on Gucci's payroll.

The rogue employee tricked his former colleagues into activating a token associated with this account in June 2010, a month after his contract of employment was terminated by Gucci for unrelated reasons in May 2010.

The fashion house called in investigators after the November assault, who tracked the attack back to Yin. In Monday, the alleged hacker was indicted on a 50-count rap that includes computer hacking, identity theft and falsifying business records charges. The most serious charge – computer tampering in the first degree – is punishable on conviction by up to 15 years behind bars.

The case is being prosecuted by the New York County District Attorney's office, which put out a statement on the case here.

Regardless of the outcome of the case, the incident serves to illustrate the importance of managing user accounts, particularly in cases where a worker leaves the employment of a firm.

More commentary on this aspect of the case can be found in a blog post by Sophos here. ®

Remote control for virtualized desktops

Whitepapers

Choosing cloud Backup services
Demystify how you can address your data protection needs in your small- to medium-sized business and select the best online backup service to meet your needs.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
Driving business with continuous operational intelligence
Introducing an innovative approach offered by ExtraHop for producing continuous operational intelligence.
10 threats to successful enterprise endpoint backup
10 threats to a successful backup including issues with BYOD, slow backups and ineffective security.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?