Krebs is reporting that Orvis, a Vermont-based retailer that specializes in high-end fly fishing equipment and other sporting goods, leaked hundreds of internal passwords on Pastebin.com for several weeks last month, exposing credentials the company used to manage everything from firewalls and routers to administrator accounts and database servers, KrebsOnSecurity has learned. Orvis says the exposure was inadvertent, and that many of the credentials were already expired.
Experts have commented below.
Experts Comments
November 13, 2019
Keeping track of passwords within the business gets complex when you’re using local accounts. It’s important to have a centralised identity and access management system to protect not only user accounts, but also devices like routers, switches and firewalls. Using local or shared accounts requires some type of repository to store the credentials and when these are accidentally posted in uncontrolled environments, it can open opportunities for unauthorised use, which can lead to.....Read More
Like(Submit Your Expert Comments
What do you think of the topic? Do you agree with expert(s) or share your expert opinion below.Be part of our growing Information Security Expert Community (1000+), please register here.
Linkedin Message
@Jonathan Deveaux, Head of Enterprise Data Protection, provides expert commentary at @Information Security Buzz.
"Orvis is fortunate that no reports of customer data were leaked...."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/experts-comments-on-orvis-com-leaked-internal-passwords-on-pastebin
Facebook Message
@Jonathan Deveaux, Head of Enterprise Data Protection, provides expert commentary at @Information Security Buzz.
"Orvis is fortunate that no reports of customer data were leaked...."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/experts-comments-on-orvis-com-leaked-internal-passwords-on-pastebin