NCIX Data Breach

[Robert Upndown]

https://vancouversun.com/news/local...t-and-containing-huge-amounts-of-private-data

http://dailyhive.com/vancouver/ncix-database-servers-security-breach-2018

If you bought anything at NCIX, worth a read

Bob

 

[felixthecat]

Wow. Thanks, Bob.

I'm scratching my head why NCIX would have anybody's social security numbers. The rest is easier to believe - address, email, password, credit card info. Unpleasant.

 

[Sphubby]

Wow. Thanks, Bob.

I'm scratching my head why NCIX would have anybody's social security numbers.

One of the files found was "payroll_Data.MDF" Feel sorry for the former employee's also.

 

[cktc9]

Yikes!

I've done a lot of biz with them over the years...

I double checked my record, and the last time I bought from them was Apr 2017.
Fortunately, in Oct 2017 I changed banks.
Any details they have on me are all dead accts now.

Man, I really gotta start using cash again...

I think the Social security numbers referred to are from their now ex-employees.

Nasty mess.
Take care all...

 

[clu]

At risk of stating the obvious, anyone who registered an account with them (for tech support, online ordering, etc.), your password will have been compromised. If you used that same password on any other website (not advised), then you need to change it.

 

[clu]

From the original first-person recount about it all at https://www.privacyfly.com/articles/ncix_breach/

I mounted one image belonging to Steve Wu the founder of NCIX. Inside I found data going back 13 years, financial documents, employment letters containing SIN numbers, and data from Mr. Wu’s home computer which featured personal documents and images of his family mixed in with numerous private photos of high end escorts from mainland china.

I'm torn on this one. On the one hand we have a self-professed privacy white hat casually outing a guy as using escorts for his family to see. On the other hand, the guy being outed is the dick that couldn't be bothered to protect his millions of customers from identity theft and remorselessly "stole" from customers by accepting their money (or hardware for repair) when he had no ability to deliver.

What do people think? Is this casual outing within bounds or not?

 

[80watts]

Are there any laws that protect consumers data? Did NCIX break any laws by not protecting customers data? The servers should of been wiped clean before being sold.....
Most workplaces have policies concerning porn, the storing of escort photos would fall under that on work computers

 

[clu]

Potential class action suit:

https://www.cbc.ca/news/canada/british-columbia/ncix-breach-private-computer-lawsuit-1.4838149

But since they're bankrupt, feels like we'd be trying to get blood from a turnip.