Kitz ADSL Broadband Information
adsl spacer  
Support this site
Home Broadband ISPs Tech Routers Wiki Forum
 
     
   Compare ISP   Rate your ISP
   Glossary   Glossary
 
Please login or register.

Login with username, password and session length
Advanced search  

News:

Author Topic: ACS:Law - Database leaked many UK customer private info  (Read 3798 times)

quarantine

  • Just arrived
  • *
  • Posts: 6
ACS:Law - Database leaked many UK customer private info
« on: September 26, 2010, 01:43:53 PM »

Hi go easy on me guys this is my first post.
Two days ago a law firm comapny named ACS:Law were suffering a denial of service attack (ddos) on there website by the infamous 4Chan group. The admin of the website shut the web page down to soften the blow only he didnt realise he left an open database of thousands upon thousands of private data. This data was grabbed by whoever could get it and reproduced so that there were backup copies. Its readlily available on the interent to download and contains some very private details which include
Credit card details (including the 3 pin on the back) that acs:law clients were forced to pay.
ISP letters asking for very large amounts of private data on there customers.
Phone numbers
Address's
IP address's
Private emails from the company to other companies boasting how easy it is to make money from people illegally downloading.
Business plans
And much much more (a whole database)

Anyone who has had a letter from this law company based on the internet i would suggest you looking for the evidence and STOP paying them.
Original story here
http://torrentfreak.com/acslaw-anti-piracy-law-firm-torn-apart-by-leaked-emails-100925/
the evidence can be found here
http://thepiratebay.org/torrent/5850493/ACS-Law_leaked_emails

Are your details in this database if so contact your solicitor ;)
Logged

BritBrat

  • Kitizen
  • ****
  • Posts: 1359
Re: ACS:Law - Database leaked many UK customer private info
« Reply #1 on: September 26, 2010, 02:10:28 PM »

I have been reading about this most of the morning.

I hope the data protection office has also been taking a long read and why was this data not secure and encrypted?
Logged

quarantine

  • Just arrived
  • *
  • Posts: 6
Re: ACS:Law - Database leaked many UK customer private info
« Reply #2 on: September 26, 2010, 02:20:45 PM »

Originally it started as a ddos attack going on for a number of days where i quote Andrew Crossley saying " This has taken an hour of my life ive got more important things to be doing like catching a train."
After the statement was made the admin of the ACS:Law online website shut the site down to stop the incoming attacks only the database was left accessible. Some people are saying it was delibratly left on by the admin who was for the 4chan cause but we will never know.
As ive herd it there are teams who are with 4chan and some not with 4chan who are trying to contact every leaked person on that list via there email or telephone number to warn them about this. However how much of that is true is unconfirmed. Lets hope the innocent public can find out about this before its too late and there cards are ripped off or something. Pretty sure this will be the end of ACS:Law
« Last Edit: September 26, 2010, 02:25:01 PM by quarantine »
Logged

roseway

  • Administrator
  • Senior Kitizen
  • *
  • Posts: 43568
  • Penguins CAN fly
    • DSLstats
Re: ACS:Law - Database leaked many UK customer private info
« Reply #3 on: September 26, 2010, 03:03:39 PM »

One thing which is quite astounding is that the database included the 3-digit card security codes. This data should never be stored (or even be read) by the website operator. It's for bank use only, and when you enter that information on a secure site it should be passed straight through to the bank.

[Edit] Actually, having read a bit about it, I don't think I've got that quite right. But it's certainly the case that the website should not store this information. It is solely for use at the time of the transaction.

« Last Edit: September 26, 2010, 03:12:18 PM by roseway »
Logged
  Eric

tuftedduck

  • Senior Kitizen
  • ******
  • Posts: 29658
  • Router Luvvin Duck
Re: ACS:Law - Database leaked many UK customer private info
« Reply #4 on: September 26, 2010, 03:37:03 PM »

I am trying to make sense of this rather worrying situation.

Am I correct in saying that customers of Virgin Media and of the AOL/TalkTalk/Tiscali organisation should not be even potentially affected by this happening.
Did these two companies not earlier refuse to cooperate or trade with ACS:Law ?
Logged

BritBrat

  • Kitizen
  • ****
  • Posts: 1359
Re: ACS:Law - Database leaked many UK customer private info
« Reply #5 on: September 26, 2010, 04:16:04 PM »

If you are with TalkTalk or Virgin you have no worries.
Logged

tuftedduck

  • Senior Kitizen
  • ******
  • Posts: 29658
  • Router Luvvin Duck
Re: ACS:Law - Database leaked many UK customer private info
« Reply #6 on: September 26, 2010, 04:17:58 PM »

Thank you, BritBrat.... :)

Logged

roseway

  • Administrator
  • Senior Kitizen
  • *
  • Posts: 43568
  • Penguins CAN fly
    • DSLstats
Re: ACS:Law - Database leaked many UK customer private info
« Reply #7 on: September 26, 2010, 04:26:27 PM »

As I understand it, you'll only be on that database if ACS:Law has accused you of illegal downloading, and they will only have your credit card details if you've paid them.
Logged
  Eric

BritBrat

  • Kitizen
  • ****
  • Posts: 1359
Re: ACS:Law - Database leaked many UK customer private info
« Reply #8 on: September 27, 2010, 12:24:42 PM »

The reason I said no worries was because I believe they did not target TalkTalk or Virgin.

See attached court order of Nov and July.

[attachment deleted by admin]
« Last Edit: September 27, 2010, 12:32:17 PM by BritBrat »
Logged

quarantine

  • Just arrived
  • *
  • Posts: 6
Re: ACS:Law - Database leaked many UK customer private info
« Reply #9 on: September 27, 2010, 06:16:47 PM »

anyone else think this is just a start to how the new digital economy bill will fail.
Logged
 

anything