Data Breaches Reported at NetworkSolutions, Register.com, and Web.com (krebsonsecurity.com) 17
"Top domain name registrars NetworkSolutions.com, Register.com and Web.com are asking customers to reset their passwords after discovering an intrusion in August 2019 in which customer account information was accessed," reports security researcher Brian Krebs:
"On October 16, 2019, Web.com determined that a third-party gained unauthorized access to a limited number of its computer systems in late August 2019, and as a result, account information may have been accessed," Web.com said in a written statement. "No credit card data was compromised as a result of this incident." The Jacksonville, Fla.-based Web.com said the information exposed includes "contact details such as name, address, phone numbers, email address and information about the services that we offer to a given account holder...."
Both Network Solutions and Register.com are owned by Web.com. Network Solutions is now the world's fifth-largest domain name registrar, with almost seven million domains in its stable, according to domainstate.com; Register.com listed at #17 with 1.7 million domains.... Web.com said it has reported the incident to law enforcement and hired an outside security firm to investigate further, and is in the process of notifying affected customers through email and via its website....
Web.com wasn't clear how long the intrusion lasted, but if the breach wasn't detected until mid-October that means the intruders potentially had about six weeks inside unnoticed. That's a long time for an adversary to wander about one's network, and plenty of time to steal a great deal more information than just names, addresses and phone numbers.
Both Network Solutions and Register.com are owned by Web.com. Network Solutions is now the world's fifth-largest domain name registrar, with almost seven million domains in its stable, according to domainstate.com; Register.com listed at #17 with 1.7 million domains.... Web.com said it has reported the incident to law enforcement and hired an outside security firm to investigate further, and is in the process of notifying affected customers through email and via its website....
Web.com wasn't clear how long the intrusion lasted, but if the breach wasn't detected until mid-October that means the intruders potentially had about six weeks inside unnoticed. That's a long time for an adversary to wander about one's network, and plenty of time to steal a great deal more information than just names, addresses and phone numbers.
NOthing new (Score:2)
I've been getting spam email at "netsol@mydomain.com" for a couple of years now.
Either (a) Rhey're selling their database to spammers, or (b) their systems aren't secure.
Re: (Score:2)
"They're" dammit.
(was typing around my cat at the time)
Perl coder spotted! (Score:3)
(was typing around my cat at the time)
Stop using your cat to do your Perl development for you !
(Perfectly syntactically correct Perl should never have been indistinguishable from cats walking across keyboards !)
Yay. (Score:5, Informative)
Couldn't have happened to a nicer bunch. Network Solutions has been engaging in a number of nasty practices for over a decade, one of the worst being that they did (or still do?) put a registration lock on ANY domain name that was searched on their website. Merely searching a domain name there results in the inability to register that domain name at any other service for several days.
Re: (Score:3)
Isn't this public WHOIS data? (Score:3)
Except for which services you're subscribed to, isn't the name, address, phone number, and email address already public in the WHOIS database [whois.net]? Unless you're paying extra for private registration (which should actually be the default - the current registration policies were created in a world before spam).
Re: (Score:3)
My thought as well.
I received a "Notice of Data Breach" email from my registrar, who as it happens is also owned by web.com. They're so small that they didn't even get a mention on the web.com Wikipedia page in the Acquisitions section.
The Notice says, "We encrypt credit card numbers and passwords, and no credit card data was compromised as a result of this incident," and "...as an additional precaution are requiring all users to reset their account passwords." Which boils down to re-directing the account h
NetworkSolutions = Web.com (Score:5, Informative)
NetworkSolutions = Web.com
Web.com bought NetSol and promptly raised domain registration prices.
Web.com were scumbags back in the day and they're just as bad now as they were then.
I'll be moving all my domains to another registrar within a month.
Re: (Score:3)
Cloudflare does .com domains for $8/year, just sayin'.
Re: (Score:3)
Cloudflare does .com domains for $8/year, just sayin'.
I'm not 100% sure I trust Cloudflare.
Domains.com also does $8 or $8.99 domain names, but for all TLDs if I recall correctly.
So yeah, I'll be moving all of them, just not sure where yet.
Re: (Score:1)