Autodoc hacked

[Beany]

I know a few people use Autodoc on here for car parts. They've been hacked.

Initial comms:
"No other data is affected, in particular no access data, passwords, credit card data, bank data, credit balances, or order
details."

Now: "According to our investigations, we cannot completely rule out the possibility that the perpetrators got hold of encrypted data, behind which customer passwords are also hidden"

So basically, I speculate that they did poor data segregation, someone phished a customer services person and their customer passwords were pivotable from that.

And - speculation again - they probably weren't well encrypted very well and they think they can be decrypted. If they were confident in their encryption, they'd have said so. Good encryption will be realistically uncrackable for a solid decade from today, etc.

Search your email for AutoDoc, if you have an account, change your password, and the usual change it on other places it was shared with because I knw you do that.

Also, you might not have got an email about this. My pal Charles did. The initial comms were over two weeks ago. The most recent one (where passwords are mentioned as being at risk) is from last night.

I didn't get any emails about this....

....at all....

[Sundayjumper]

Ta. I'd not received anything either.

...change your password, and the usual change it on other places it was shared with because I knw you do that.

I don't actually <smug>. All my passwords are unique 20 character random strings, They're not saved electronically anywhere, local or online, obviously, that would be crazy insecure, I write them on the noticeboard behind me. In large letters so they're easily legible.

I'm also researching my family history at the moment, and the noticeboard is a great place to sketch out my family tree - you know, the usual family tree stuff - names, dates & places of birth, marriages. It's really interesting.

Anyway, if you fancy doing a video chat some time I'll happily explain further how totally watertight my security processes are.

[Explosive Newt]

Ta. I'd not received anything either.

...change your password, and the usual change it on other places it was shared with because I knw you do that.

I don't actually <smug>. All my passwords are unique 20 character random strings, They're not saved electronically anywhere, local or online, obviously, that would be crazy insecure, I write them on the noticeboard behind me. In large letters so they're easily legible.

I'm also researching my family history at the moment, and the noticeboard is a great place to sketch out my family tree - you know, the usual family tree stuff - names, dates & places of birth, marriages. It's really interesting.

Anyway, if you fancy doing a video chat some time I'll happily explain further how totally watertight my security processes are.

Same, but I also keep my bank details and credit card numbers on the board so I don't have to keep getting cards out when I pay for things. I wrote that in big red letters so it's easy to find.

[Sundayjumper]

Very smart move. You should join me & Beany on that video conference.

[Beany]

Make sure your get a nice, sharp hi Def webcam first though, and make sure your office is well lit so you don't misread the whiteboard, yeah?

[DeskJockey]

I can help with the lighting. Can you send me some pictures of your noticeboards so I can design lighting concept? Need a clear close up of each individual note.

[jamcg]

I strongly advise you secure all your expensive watches and car keys by putting them together in a safe place, like your windowsill. This has the added benefit where you can further protect them from environmental damage by opening the window. Nice and wide. Bit of fresh air works wonders

Please ensure you ask your whiteboard to help you remember your house number and postcode at the same time