Cybercrooks strut away with haute couture Harvey Nichols data High-end British department store Harvey Nichols is writing to customers to confirm some of their data was exposed in a recent cyberattack. Customers have already received, or are set to receive, letters this week with details of the incident, which exposed their name, company (if provided), phone number, as well as email and …
HN: we've been hacked, here's an obscured URL, you'll have to click to find out what it leads to, oh, soz, it's a document type that could itself be used as an attack."
The URL numeric part seems to vary by recipient, i.e. it's a tracker. Presumably they've repurposed a targeted advertising emailer to distribute the link to the PDF, rather than put details in simple text on a webpage on the HN site.
+10 points for admitting it.
-5 points for the way it was done.
I liked the paragraph:
Alluding to a potential vulnerability, the document sent to customers states: "The issue that allowed the attack to succeed has now been closed so our system is once again fully secure, and we have engaged experts to ensure it remains so."
Are those the same experts that you should have used in the first place or different ones?
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2025
