- Mythbuster busts his own tale
- 10 open source companies to watch
- Sony recalls 73,000 Vaio laptops
- Tool to evade China's Web censorship
- Chrome and Firefox and add-ons
Newsletters | Podcasts | Chats | Opinions | RSS Feeds | This Week In Print | IT Careers | Community | Reports | Downloads | Slideshows | New Data Center
Partner Sites:App Performance | On Demand Security | Networking Solution | SOA | Value of WDS
A series of SQL injection attacks on servers hosted by a third-party service provider has compromised the personal data of an unspecified number of individuals who had shopped on Major League Soccer's MLSgear.com Web site.
The compromised information included names, addresses, credit and debit card data, and MLSgear.com passwords, MLS President Mark Abbot said in a letter sent to affected individuals on Feb. 1. MLSgear.com is the soccer league's official online store.
The incident was first reported by PogoWasRight.org, a blog that trackes data breaches. It also posted a link to a notice that was sent by MLSgear.com to the office of New Hampshire's attorney general, informing the AG of the breach and saying that it affected 169 New Hampshire residents (Compare Data Leak Protection products).
The notification was signed on behalf of MLSgear.com by Michael Sapherstein, the league's deputy general counsel. The letter to the AG noted that a forensic audit conducted at the behest of Visa and MasterCard showed that the SQL injection attacks appear to have occurred between January and August of last year. The attacks were directed at third-party servers that were hosting the MLS customer data, Sapherstein said.
"We have a zero-tolerance policy when it comes to protection of our customers' personal information and consequently, we are terminating our relationship with that e-commerce provider," Sapherstein wrote.
He added that MLS had taken further steps to strengthen the "already stringent measures" that were in place for protecting customer data, but he didn't offer any details on what those steps were. He also said that the MLS had contacted the FBI about the breach and that it is working with Visa, MasterCard and Chase Paymentech, which processes its credit card transactions.

Gartner summarizes its view on Application Delivery Controllers, evaluates strengths and weaknesses...
Vulnerability Management For DummiesDownload this concise book "Vulnerability Management for Dummies," to learn about the simple steps...
The ROI and TCO Benefits of Data Deduplication for Data Protection in the EnterpriseThis paper examines and quantifies the costs and benefits of backup with deduplication storage as...

Life on the edge of your WAN has changed dramatically. With the need to deliver advanced services,...
PoE Plus: Impact on the PoE MarketThe standard for Power over Ethernet (PoE), IEEE Std. 802.3af(tm)-2003, advanced networking,...
Harnessing the power of communications to increase workplace performanceDue to the convergence of IT and telecommunications technologies, the business workplace has been...

We have so many holes punched in our firewalls today that many industry insiders question the value...
The self-managed networkWe aren't there yet, but advances in network and systems management tools are making it possible to...
Partner Content
Brilliantly simple security and control solutions for email, web and endpoint
www.sophos.com
Stopping data leakage
Learn how to exploit your current security investment to control the information that flows into, through and out of your network.
Download the white paper.
Why detection rates aren't enough
Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.
Download the white paper.
Applications: taking back control
Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.
Learn more today.
Comment