back to article 14 million Verizon subscribers' details leak from crappily configured AWS S3 data store

Another day, another leaky Amazon S3 bucket. This time, one that exposed account records for roughly 14 million Verizon customers to anyone online curious enough to find it. The cloud-hosted repository, ironically owned by Israeli-based software security vendor NICE, contained terabytes of Verizon customer names, addresses, …

  1. fobobob

    On the list...

    They're on my list of companies I'm very glad I've never done business with. Not that they weren't already there or anything.

  2. hellwig

    Sensitive Information

    “to authenticate a customer calling our wireline call center, but do not provide online access to customer accounts.”

    Wasn't there just a story about a TelCo allowing someone even without the proper passcode to request a service change to another persons account, effectively re-directing calls and SMS to the imposter's own phone, bypassing weak SMS authentication?

    So if someone had my phone number, name, and PIN, they could do dangerous things to the account, correct, perhaps even force a reset of my online password?

  3. Alistair
    Windows

    Ohhhh

    Didn't read article, came to comment that the header image needs be used in all cases like this.

  4. Anonymous Coward
    Pint

    Irony - look it up.

    And Verizon bought Yahoo. There's a prime example that the universe has a sense of humor.

  5. Anonymous Coward
    Anonymous Coward

    Love the PR corporate'eez...

    Written by a wanker who has self-entitlement issues regarding people's data, but who also shirks any responsibility. So what was this outfit doing with this data? Feeding it into some election deepmind to manipulate the population once again, but then leaving the data fully exposed later anyway?

    http://www.independent.co.uk/news/world/americas/us-politics/us-leak-data-americans-personal-information-deep-root-analytics-republican-national-committee-a7798251.html

  6. Anonymous Coward
    Anonymous Coward

    huh?

    The statement from NICE was incoherent - is that a new communication strategy?

    1. Pompous Git Silver badge

      Re: huh?

      "The statement from NICE was incoherent - is that a new communication strategy?"
      No not really. Listened to any politicians explaining why the back-doors they are calling for aren't really back-doors?

  7. Anonymous Coward
    Anonymous Coward

    Can I say "I told you so"?

    I personally told Verizon not to put their sensitive customer information onto AWS ... but did they listen ... NOOOOOOoooooooo. I don't expect this to be the last time something like this happens.

  8. aaronj2906_01

    Title is in reverse..

    14 MEEELLION telco subscribers data leaked from crappily configured Amazon Web Services. Clients happen to be Verizon subscribers'. Are any other telco's involved?

  9. Anonymous Coward
    Anonymous Coward

    NICE to see you

    To see you NICE.

  10. Anonymous Coward
    Anonymous Coward

    "although the large majority of those were hashed"

    It was either hashed or it wasn't there is no in between. You don't purposely write code to check if sensitive data is hashed before using it, you salt and hash it all.

  11. Anonymous Coward
    Anonymous Coward

    Nice have recently moved their support to India and South America. No idea if this is relevant or they're to blame but we've noticed the support from them go from poor to crap.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Other stories you might like