http://www.twinspires.com/content/node/1092002
Quote:
Sub-set of TwinSpires.com Customers Impacted by Data Intrusion
|
Data Intrusion, what the h*ll is that?
Right off the bat, the people at TS are telling me they're clueless.
Quote:
TwinSpires.com was recently the victim of a cyber-attack that exposed some personal information of a small subset of customers.
|
Translation: some hacker discovered we haven't paid enough attention to securing our web site and the information we manage about you.
Quote:
According to our independent security experts, there is no evidence any usernames, passwords, credit card or bank account information was accessed.
|
Read: the consulting firm we've hired can not find any hard and fast evidence of exactly what was copied from our computers.
Quote:
Because we respect the privacy of our customers, we have arranged with Experian, a leading credit monitoring service, to provide affected customers with identity protection services that include credit monitoring of all three credit bureaus for a year.
|
Read: we're not sure of the size or the scope of the breach but to do a little CYA, we're going to do what all of the other companies have done in situations like this.
Twins Spires needs to provide more specific information about the nature of the breach. And, they need to tell us what they are going to change to prevent a repeat and how they are going to improve security. And, since I believe they are a publicly traded company, they are bound by various laws regarding securing their IT systems.
For those who do not think there's that much risk or exposure, think again. Having your email account is a way for hackers to ferret out information about you, and, as was discussed elsewhere in the last month or two, it can lead to gleaning enough information to get vital personal and financial information.
If you are one of those individuals which received a letter from Twin Spires, a good first step would be to get a new email account and to change the credit card you used for your Twin Spires account. Yes, I know, it is a hassle -- a big hassle if you have automatic payments set up to use that credit card.