The Register® — Biting the hand that feeds IT

Feeds

Stratfor settles class-action over Anon megahack with freebies

You want fries with that bucket-o-geopolitical-intel?

Regcast training : Hyper-V 3.0, VM high availability and disaster recovery

Stratfor has agreed to forgo $1.75m in income to settle a class action lawsuit arising from a high-profile hack by hacktivist group Anonymous against the global intelligence firm's systems last December.

Anonymous-affiliated hackers broke into Stratfor's systems in the run-up to Christmas last year before publishing hundreds of thousands of email addresses belonging to subscribers along with an estimated 4,000 customer credit records. Various Anons boasted of plans to use the stolen credit card data to make donations to charities, including the Red Cross. Any such transaction would have more than likely been identified and reversed, however.

Stratfor's website was also thrashed during the attack, which allowed hackers to extract confidential internal emails, which soon found their way onto WikiLeaks.

Chief among several mistakes that left Stratfor wide open to attack was a failure to encrypt the credit card files that hacktivists stole and later dumped online. David Sterling of Sterling & Sterling, a New York-area insurance broker and Stratfor subscriber, filed a class-action lawsuit over the breach.

Stratfor has offered to settle the suit by offering each claimant free access to its service for a month, something that would normally cost $29, as well an eBook published by Stratfor called The Blue Book, priced at $12.99. Supplying these goods and services at no charge will leave Stratfor an estimated $1.75m out of pocket, Reuters reports. The private intelligence firm also agreed to pay $400,000 in legal fees.

US District Judge Denis Hurley gave his preliminary stamp of approval to the settlement earlier this month. A final hearing is set for 28 September.

Jeremy Hammond, 27, of Chicago, Illinois, was charged in March with access device fraud and hacking offences in relation to to the Stratfor hack. He is alleged to be the infamous Anonymous figure "Anarchaos".

Hammond's arrest took place with the assistance of LulzSec suspect turned FBI informant, Hector Xavier 'Sabu' Monsegur, officials said. Court documents reveal that Monsegur offered an FBI-supplied server as a repository for 20GB of data extracted from Stratfor, an offer that was accepted. ®

Agentless Backup is Not a Myth

Re: $1.75m out of pocket

Claimants are Stratfor (ex)-customers which have been fed their "product" for a while at the prices usually paid for. You do not buy this kind of services one off - you buy them on a recurring basis. So, actually, it is pretty safe that they would have bought it - same as the month of service.

2
0

@Harmony

perhaps you should post under another moniker when you name-call and sarcastigate.

How about, "Stratforever"?

1
0

Charity.

"Various Anons boasted of plans to use the stolen credit card data to make donations to charities, including the Red Cross. Any such transaction would have more than likely been identified and reversed, however."

According to an earlier article on this site, published immediately after the incident occurred, the reversal of charges would have cost the "recipient charities" $35 per fraudulent donation. It would be interesting to know if any such fraudulent "donations" were made, and if so, how much the charities lost as a result.

1
0

More from The Register

 breaking news
NSA PRISM snoop-gate: Won't someone think of the children, wails Apple
10,000 things probed, mostly about missing kids, Alzheimer patients, we're told
 breaking news
Number of cops abusing Police National Computer access on the rise
Only a telegram from the Queen can get you off it
 breaking news
NSA PRISM-gate: Relax, GCHQ spooks 'keep us safe', says Cameron
Whatever they are up to, it's all above board, we're told
PRISM snitch claims NSA hacked Chinese targets since 2009
Snowden suddenly looks safer in Hong Kong after revelations
 breaking news
US chief spook: Look, we only want to spy on 6.66 BEELLLION of you
Americans assured they are not in the NSA's sights
Flash flaw potentially makes every webcam or laptop a PEEPHOLE
But it's a Google problem - Chrome only, insists Adobe
Speech-to-text drives motorists to distraction
Will talking to you mean I crash into that car up ahead, Siri?
DHS warns of vulns in hospital medical equipment
Has your doctor's anasthesia machine been hacked?
 breaking news
'BadNews is malware' says outfit that found it
Google says code harmless but Lookout says code base is evolving
Panda-peddlers cuffed for chess gambling gambit
More porridge on the menu for Chinese coders after second offence