PLUG Security TEST Team: Elance Alert

[David Munson]

Nobody seems to know yet how many records were compromised, judging from
what I can find online.

At least it's not like the UC San Diego Cancer Center breach... 30,000
people notified about a hack that gave access to names & addresses, date of
birth, and medical records.
http://datalossdb.org/incidents/2187-30-000-notified-about-names-birth-dates-and-diagnosis-and-treatment-dates-on-hacked-server

On Sat, Jul 18, 2009 at 9:31 AM, Lisa Kachold <lisakachold at obnosis.com>wrote:

> NOTE: To HackFesters, Elance is not a FLAG:
>
> ---------- Forwarded message ----------
> From: Elance Trust and Safety <no-reply at elance.com>
> Date: Fri, 17 Jul 2009 19:39:59 -0500
> Subject: Elance Alert
> To: <snip>
>
> To ensure you receive future emails, please add
> reply at announce.elance.com to your Safe Sender list.
> View as a Web Page:
>
> http://view.announce.elance.com/?j=fe8a1d747c64077476&m=feef10797c6d05&ls=fe0410737761017974147274&l=fe9a16717664077b73&s=fe2d10707066057b731678&jb=ffcf14&ju=
>
> Dear obnosis,
>
> We recently learned that certain Elance user information was accessed
> without authorization, including potentially yours. The data accessed
> was contact information -- specifically name, email address, telephone
> number, city location and Elance login information (passwords were
> protected with encryption). This incident did NOT involve any credit
> card, bank account, social security or tax ID numbers.
>
> We have remedied the cause of the breach and are working with
> appropriate authorities. We have also implemented additional security
> measures and have strengthened password requirements to protect all of
> our users.
>
> We sincerely regret any inconvenience or disruption this may cause.
>
> If you have any unanswered questions and for ongoing information about
> this matter, please visit this page in our Trust & Safety center:
> http://www.elance.com/p/trust/account_security.html
>
> For information on re-setting your password, visit:
> http://help.elance.com/forums/30969/entries/47262
>
> Thank you for your understanding,
>
> Michael Culver
> Vice President
> Elance----------------------------------------
>
>                     This email was sent to:  lisakachold at obnosis.com
> ( obnosis )
>                     Your username is included to show this message
> originated from Elance.
>
>                      We respect your right to privacy - visit the
> following URL to view our policy.
>        ( http://www.elance.com/p/help/tos/index.html#privacy )
>
>        This email was sent by:
>        Elance, Inc.
>        441 Logue Avenue, Suite 150
>        Mountain View, CA, 94043-4020, USA
>
>        ----------------------------------------
>
>        Visit the following URL to manage your subscriptions.
>        (
> http://click.announce.elance.com/subscription_center.aspx?s=fe2d10707066057b731678&j=fe8a1d747c64077476&mid=feef10797c6d05&l=fe9a16717664077b73&jb=ffcf14
> )
>
>        Visit the following URL to update your profile.
>        (
> http://click.announce.elance.com/profile_center.aspx?s=fe2d10707066057b731678&mid=feef10797c6d05&j=fe8a1d747c64077476&l=fe9a16717664077b73&jb=ffcf14
> )
>
>        Visit the following URL to unsubscribe.
>        (
> http://click.announce.elance.com/unsub_center.aspx?s=fe2d10707066057b731678&j=fe8a1d747c64077476&mid=feef10797c6d05&lid=fe9a16717664077b73&jb=ffcf14
> )
>
>
>
> --
> http://linuxgazette.net/164/kachold.html
> (623)239-3392 Skype: obn0sis
> (503)754-4452 www.obnosis.com
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change your mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.PLUG.phoenix.az.us/pipermail/plug-discuss/attachments/20090718/1825f2c2/attachment.htm