Home > Security News > Programmer charged for sniffer used in TJX breach
Security News:
EMAIL THIS

Programmer charged for sniffer used in TJX breach

By SearchSecurity.com Staff
05 Nov 2008 | SearchSecurity.com

Security Wire Daily News
Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google

A New York programmer is charged with helping a group of hackers break into corporate networks to pilfer corporate data.

TJX data security breach:
Did TJX take the right steps after data breach? Security experts are mixed on whether TJX acted properly following a massive data breach last month. One expert says potential victims should have been notified sooner.

PCI DSS auditors see lessons in TJX data breach: Following the recent TJX data breach, several PCI Data Security Standard auditors say the retailer violated basic requirements of the PCI DSS.

Canadian officials to release TJX report, settlement nears: Canadian data privacy officials plan to release a report outlining the TJX data security breach just days after TJX reached a tentative settlement with victims.

Stephen Watt, 25, was charged in U.S. District Court with providing a modified sniffer program used to monitor and capture data, including customers credit and credit card information, as it traveled across corporate computer networks.

Watt's indictment is believed to be tied to the massive data security breach at TJX Cos. Inc. as well as several other retailers. TJX officials admitted that more than 45 million credit and debit cards were stolen over an 18-month period by hackers who managed to penetrate its Wi-Fi network. The retailer has been criticized for collecting too much consumer data and failing to upgrade its Wi-Fi security to the stronger WPA encryption protocol.

Investigators said Watt was allegedly part of a conspiracy to gain access to corporate networks using various techniques between 2003 and 2008. Watt is one of more than 10 people charged in connection to a string of data security breaches, including the TJX breach.

Watt is charged with a single count of conspiracy and faces a maximum sentence of five years in prison and a $250,000 fine if convicted, according to a statement released by the U.S. Attorney's office in Massachusetts.



Tags: Identity Theft and Data Security BreachesHacker Tools and Techniques: Underground Sites and Hacking GroupsVIEW ALL TAGS

Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google



RELATED CONTENT
Identity Theft and Data Security Breaches
Health Net healthcare data breach affects1.5 million
Massive T-Mobile UK security breach involves insiders
Chip and PIN adoption serves lesson for U.S. payment industry
Group to shed light on secure identity management threats
Heartland CIO is critical of First Data's credit card tokenization plan
Heartland CIO on end-to-end encryption, credit card tokenization
Heartland CIO on PCI, E3 project
Visa probes tokens, encryption for PCI card data protection
University data breach exposes 163,000 women to identity theft
TJX thrives following breach, bucks sour economy

Hacker Tools and Techniques: Underground Sites and Hacking Groups
Russian cybercriminals target H1N1 Swine Flu fears
Metasploit Project acquisition ups ante for penetration testing market
Successful rogue antivirus hinges on social engineering
DEFCON survey suggests hacker community on vacation
DoD urges less network anonymity, more PKI use
New hacker skills optimize revenue
Maturing cybercriminal economy buoyed by business savvy hackers
Juniper pulls ATM hacking presentation from Black Hat
Botnet platform helps cybercriminals bid for zombie PCs
Man pleads guilty in online banking hacking scam

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
bot worm  (SearchSecurity.com)
CISP-PCI  (SearchFinancialSecurity.com)
cookie poisoning  (SearchSecurity.com)
drive-by pharming  (SearchSecurity.com)
extrusion prevention  (SearchSecurity.com)
identity theft  (SearchSecurity.com)
parameter tampering  (SearchSecurity.com)
pretexting  (SearchCIO.com)
Rock Phish  (SearchSecurity.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



More Tips to Secure Your Network
TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts