https://finance.yahoo.com/news/equifax-password-username-admin-lawsuit-201118316.html
Equifax (EFX) used the word “admin” as both password and username
for a portal that contained sensitive information, according to a class
action lawsuit filed in federal court in the Northern District of
Georgia.
The ongoing lawsuit, filed after the breach, went viral on Twitter
Friday after Buzzfeed reporter Jane Lytvynenko came across the detail.
“Equifax employed the username ‘admin’ and the password ‘admin’ to
protect a portal used to manage credit disputes, a password that ‘is a
surefire way to get hacked,’” the lawsuit reads.
The lawsuit also notes that Equifax admitted using
unencrypted servers to store the sensitive personal information and had
it as a public-facing website.
No comments:
Post a Comment