NATS hacker?

SheepGuy · 2007-12-23, 03:48 AM

Just got this email, can't remember ever making a sale with these guys, but thought I'd pass it on. I don't visit a lot of boards so I hadn't heard of it

Hi Dan,

Dave from SterlingCash.com here - you may have already heard about the situation regarding a compromise of data from sponsors who use NATS. If not, it's all over the webmaster boards so if you want a very long read, I'm sure you know where to go.

At this point it isn't clear if our data has been compromised or not, but we are going to assume it has and react accordingly.

As far as we see it, the worst case scenario is that our affiliate and member databases have been accessed by a hacker using a NATS admin account which is reserved for use by the NATS tech team. We disabled this account as soon as this issue was brought to our attention, and we have changed passwords on our other admin accounts.

The affiliate data we hold is the information you may have entered when you signed up with us: your name, address, email address, and your ePassporte account name (but NOT your ePass account password). The password for your Sterlingcash.com account is not available via the NATS admin interface, but it is encrypted on our server. It is therefore unlikely (but not impossible) that your Sterlingcash.com password has been decrypted, so we suggest that you change your password as soon as possible. It would also be wise to change the passwords you may have on any other online accounts if you are using the same username / password combination. Please note that we use an email validation system for any affiliate account changes - we ask that anyone who has received any unexpected account change verification emails contact us immediately.

We will be working closely with the NATS techs on this issue and will be in touch again if there are any new developments or useful information we can pass on to you. Don't hesitate to contact me if you have any questions.

Please accept my apologies for any inconvenience caused, and enjoy the holidays!

Regards,

2007-12-23, 03:48 AM	#1
SheepGuy It's the end of the world as we know it, and I feel fine Join Date: Jul 2006 Location: Canada Posts: 2,527	NATS hacker? Just got this email, can't remember ever making a sale with these guys, but thought I'd pass it on. I don't visit a lot of boards so I hadn't heard of it Hi Dan, Dave from SterlingCash.com here - you may have already heard about the situation regarding a compromise of data from sponsors who use NATS. If not, it's all over the webmaster boards so if you want a very long read, I'm sure you know where to go. At this point it isn't clear if our data has been compromised or not, but we are going to assume it has and react accordingly. As far as we see it, the worst case scenario is that our affiliate and member databases have been accessed by a hacker using a NATS admin account which is reserved for use by the NATS tech team. We disabled this account as soon as this issue was brought to our attention, and we have changed passwords on our other admin accounts. The affiliate data we hold is the information you may have entered when you signed up with us: your name, address, email address, and your ePassporte account name (but NOT your ePass account password). The password for your Sterlingcash.com account is not available via the NATS admin interface, but it is encrypted on our server. It is therefore unlikely (but not impossible) that your Sterlingcash.com password has been decrypted, so we suggest that you change your password as soon as possible. It would also be wise to change the passwords you may have on any other online accounts if you are using the same username / password combination. Please note that we use an email validation system for any affiliate account changes - we ask that anyone who has received any unexpected account change verification emails contact us immediately. We will be working closely with the NATS techs on this issue and will be in touch again if there are any new developments or useful information we can pass on to you. Don't hesitate to contact me if you have any questions. Please accept my apologies for any inconvenience caused, and enjoy the holidays! Regards, __________________ If the Environment was a bank, they would have saved it by now.