BigPond broadband passwords leaked

Telstra BigPond broadband usernames and passwords have been breached, with at least sixty-nine being leaked over the weekend.

A group calling itself Oxyg3n posted the batch of BigPond usernames and passwords on the www.apcmag.com forum, and a number of other chat sites, late Friday evening. Telstra said it become aware of the violation on Saturday and immediately changed the passwords involved, cancelling the compromised accounts on Sunday.

"We don't know if they [breached accounts] were accessed by people yet," Telstra spokesperson Stuart Gray told ZDNet. And -at this stage we can't be certain that more passwords and usernames have been compromised," Gray admitted.

However, Telstra stringently denies that its BigPond database was hacked into.

-It's absolutely not true that Telstra's BigPond database has been hacked into," Gray said, adding that the security breach was the result of a trojan virus that infected the sixty nine computers.

-We don't understand the reason why this was done," Gray said, adding that is seemed to be some sort of publicity stunt.

Affected users would have found their accounts inaccessible after Telstra changed their passwords, and those who contacted the telco heavyweight have confirmed they had been infected by a trojan, according to Gray.

Customers had to delete the trojan and change password in order to gain control of their accounts.

-It's illegal for those usernames and passwords to be posted," Gray said.

-There will be a full investigation into the whole event...we will try and chase down the person who did it and take every action possible," Gray added.

Advertisement

Talkback 3 comments

    telstra are a lying power mong ...Anonymous -- 24/07/01

    telstra are a lying power mongering conglomerate who would f&*k their own mothers tro save bandwidth...

    Hmmm, the quote "It’s abs ...Anonymous -- 24/07/01

    Hmmm, the quote "It’s absolutely not true that Telstra’s BigPond database has been hacked into" sounds very similar to the Commonwealth Banks claim their internet banking wasn't hacked either.

    If we assume that these guys really weren't hacked, what does it say about their internal security measures?

    Recently I read that approx 90% of breaches of corporate security were internal. Perhaps this is true, or perhaps these companies would rather blame a replacable employee rather than admit they have weaknesses in their multi-million dollar IT security systems.

    Either way, it shows that corporate security has a long way to go.

    Passwords changed immediately ...Loki -- 24/07/01

    Passwords changed immediately is to 8 hours as unlimited is to 3 Gb.

    From other reports Telstra took 8 hours to act, that is not immediate by any stretch of the imagination.. once again Telstra bend the truth like light through a prism.

Add your opinion

Latest Videos

Sponsored content

Power Centre - Content from our premier sponsors

Blogs

  • Renai LeMay How reliable is IP telephony?
    Have you ever heard a weird kind of hissing, crackling or popping noise when calling someone on an IP telephony line? How rare is the phenomenon these days?
  • Array Forget the NBN, 100Mbps is already here
    Telstra and TransACT will shortly begin offering 100Mbps broadband to many customers. By moving early, the companies have not only raised the bar for Australia's broadband services, but thrown down a challenge to a government that now faces increased pressure to deliver the NBN as promised.
  • Array IT: Govt's cost-cutting bitch
    The government needs to stop looking at IT as a necessary evil or the place to remove costs when the Treasurer comes calling.
  • More blogs »

Tags

Back to top

Featured