Category: Security

Burlington, MA & Redwood Shores, CA, 27th July, 2009 – Reports that a major data breach at Network Solutions – potentially impacting more than 570,000 cardholders around the world - is almost certainly the result of cloud computing making such network hacks highly attractive, says Imperva, the data security specialist.   "Although the data breach appears to have been discovered in early June, here we in late July - six weeks later - reading about a breach affecting more than half a million cardholders, around half of the Internet service company's customer base," said Amichai Shulman, Imperva's chief technology officer.   "As the dust settles on this major data breach - which appears to be right up there alongside the Heartland Security card data breach of the start of the year - heads will undoubtedly roll," he added.  

But, says the Imperva CTO, “the basic problem is that the rise of cloud computing - with many more companies now hosting their data on the Internet - makes such databases and the servers they are hosted on, phenomenally attractive.  The attackers here aimed on the big prize -- the servers. Instead of dealing with a site here and there, once they broke into the hosting servers and all the sites were open to them. The lesson: once you've penetrated the cloud, you've got an easy path to the important, underlying data.”   According to Shulman, as the newswires report yet another major card database hack, it is interesting to note that Network Solutions says that malware planted on its servers appears to be at the heart of the data loss.   The data breach, he said, is notable for taking place over a lengthy period, begging the question: how come it took so long to discover the incursion?   "It is also worth noting that they actually knew of the breach on June 8 but took more than six weeks to reveal the problem to the media and customers. What have they - and the card services companies – been doing in the interim?" he said.   "This case does not appear to have been handled well by the company and the delay in going public could prove expensive if, as seems likely, a class action lawsuit results from the data losses," he added.     For more on the Network Solutions data breach: http://preview.tinyurl.com/nndxtd   For more on Imperva: http://www.imperva.com  About Imperva   Imperva, the Data Security leader, enables a complete security lifecycle for business databases and the applications that use them. Over 4,500 of the world’s leading enterprises, government organizations, and managed service providers rely on Imperva to prevent sensitive data theft, protect against data breaches, secure applications, and ensure data confidentiality. The award-winning Imperva SecureSphere is the only solution that delivers full activity monitoring from the database to the accountable application user and is recognized for its overall ease of management and deployment. For more information, visit www.imperva.com.   ENDS   Media Contacts:   USA Rob Rachwald This email address is being protected from spambots. You need JavaScript enabled to view it. Tel: +1 415 613 4008   UK Neil Stinchcombe Eskenzi PR Ltd. Tel: +44 (0)2071 832 833 This email address is being protected from spambots. You need JavaScript enabled to view it.