BigPond broadband passwords leaked

Telstra BigPond broadband usernames and passwords have been breached, with at least sixty-nine being leaked over the weekend.

A group calling itself Oxyg3n posted the batch of BigPond usernames and passwords on the www.apcmag.com forum, and a number of other chat sites, late Friday evening. Telstra said it become aware of the violation on Saturday and immediately changed the passwords involved, cancelling the compromised accounts on Sunday.

"We don't know if they [breached accounts] were accessed by people yet," Telstra spokesperson Stuart Gray told ZDNet. And -at this stage we can't be certain that more passwords and usernames have been compromised," Gray admitted.

However, Telstra stringently denies that its BigPond database was hacked into.

-It's absolutely not true that Telstra's BigPond database has been hacked into," Gray said, adding that the security breach was the result of a trojan virus that infected the sixty nine computers.

-We don't understand the reason why this was done," Gray said, adding that is seemed to be some sort of publicity stunt.

Affected users would have found their accounts inaccessible after Telstra changed their passwords, and those who contacted the telco heavyweight have confirmed they had been infected by a trojan, according to Gray.

Customers had to delete the trojan and change password in order to gain control of their accounts.

-It's illegal for those usernames and passwords to be posted," Gray said.

-There will be a full investigation into the whole event...we will try and chase down the person who did it and take every action possible," Gray added.

Advertisement

Talkback 3 comments

    telstra are a lying power mong ...Anonymous -- 24/07/01

    telstra are a lying power mongering conglomerate who would f&*k their own mothers tro save bandwidth...

    Hmmm, the quote "It’s abs ...Anonymous -- 24/07/01

    Hmmm, the quote "It’s absolutely not true that Telstra’s BigPond database has been hacked into" sounds very similar to the Commonwealth Banks claim their internet banking wasn't hacked either.

    If we assume that these guys really weren't hacked, what does it say about their internal security measures?

    Recently I read that approx 90% of breaches of corporate security were internal. Perhaps this is true, or perhaps these companies would rather blame a replacable employee rather than admit they have weaknesses in their multi-million dollar IT security systems.

    Either way, it shows that corporate security has a long way to go.

    Passwords changed immediately ...Loki -- 24/07/01

    Passwords changed immediately is to 8 hours as unlimited is to 3 Gb.

    From other reports Telstra took 8 hours to act, that is not immediate by any stretch of the imagination.. once again Telstra bend the truth like light through a prism.

Add your opinion

Latest Videos

Sponsored content

Power Centre - Content from our premier sponsors

Blogs

  • Darren Greenwood Has New Zealand's smiling assassin delivered?
    One year into its tenure, how has the new New Zealand Government performed on issues of technology and telecommunications?
  • Array The long-awaited separation of Telstra
    Blessed is he who shepherds the weak through the valley of Telstra, for he is truly his brother's keeper and the finder of lost DSLAMs.
  • Array Has Particls disintegrated?
    Brisbane-born start-up Particls promised a better way of organising information from the web. Now, however, it appears to have given up the battle, with both the Particls website and that of its parent company Faraday Media disappearing from the web.
  • More blogs »

Tags

Back to top

Featured