E-mail addresses divulged with breach on iPad's security

You are here: News > News > E-mail addresses divulged with breach on iPad's security

» IT Security NEWS

» 12 June 2010

As of the latest, FBI is doing an on-going thorough investigation regarding a reported case of violation on the security of iPad. Based on given facts, about 114,000 users were affected when each of their e-mail addresses were accumulated in an illegal manner.

Non-consented gathering of data occurred

In accordance to the statement made by the firm Goatse Security just a few days ago, an abused glitch in the protocol of AT&T caused the occurrence of this event. Hence, the company was given the chance to collect data from over 114,067 users of the iPad 3G.

Higher-ups did not escape the exploitation

Even the known government officials, who also have iPad 3G, experienced the violation of privacy. The people, who had their data collected without consent, are the following: the mayor of New York Michael Bloomberg, the chief-of-staff of White House, several individuals with high position in the military, and people from the various media and business groups.

Investigation is now on the process

As said by the spokesperson from FBI Katherine Schweit in an interview with The Wall Street Journal, the agency instantly became aware of this situation and started doing a research about the attack on the computer system.

No other information was given and the topic was no longer elaborated by Schweit. Meanwhile, her only statement informed the people that the investigation is still at its early stage.

Light problems can lead to many negative effects

In response to this recent event, the whole exploit code utilized in this privacy assault was reported by a group of experts representing the Praetorian Security Group. The security researchers declared that the said glitch is an uncomplicated one and that this security vulnerability does not occur with any definite hacking.

According to the company, the collected e-mail addresses were returned in the victorious iteration or active ICCID and these were parsed. To reassure the users, it was also said that no attack was made and no violation was done in any way. The web application was just ineffectively created since it sends the e-mail addresses back whenever an ICCID is delivered to it.

Collection of data has been stopped

The company AT&T has already deactivated the function on their website, which initiated the e-mail address gathering. Additionally, the company already took the necessary actions and the problem was resolved on Tuesday this week.

Read more information about SecPoint by checking out the given links: SecPoint Press, SecPoint Products, and SecPoint News.

Click Here For Web Shop

Reviews of SecPoint.com