Comcast Passwords Leaked Onto The Web

[Peaches]

March 16, 2009 5:02 PM PDT

Comcast passwords leaked onto the Web

by Elinor Mills A list of thousands of user names and passwords for Comcast customers was removed from document sharing Web site Scribd on Monday, two months after it was posted there.

Scribd removed the list of more than 8,000 passwords and user names after being contacted by Brad Stone at The New York Times. Stone wrote that he was contacted by a Comcast customer who happened across the list after doing a search on his own e-mail address on search engine Pipl.

Comcast spokeswoman Jennifer Khoury told The New York Times that the list was probably compiled from phishing or some other related type of attack and not from inside Comcast.

Comcast is freezing the e-mail accounts of customers whose data was exposed and is contacting them, she said.

Half of the items are duplicates, so only about 4,000 customers had information exposed, according to Comcast.

CNet News - http://news.cnet.com/security/

>>>>>>>>>>>>>>>>>>>>>>>>

[Peaches]

17 March 2009, 17:10

Confusion over Comcast customers passwords exposure

The New York Times has reported that data from over 8,000 Comcast customers was unprotected and made available on the Internet. The data included both the usernames and passwords for customers of Comcast, one of the largest Internet service providers in the United States.

According to the report, on Monday 16th of March Mr. Kevin Andreyo stumbled across a list on Scribd, a document sharing Web site often used by authors, when he was searching for his own e-mail address on the search engine Pipl. The file he found contained over 8,000 entries with usernames and passwords, including his own. According to the site statistics, the document had been publicly available for over two months and was accessed over 300 times.

Heise security for details - http://www.h-online.com/security/Confusion...e--/news/112870