+ - WHMCS systems breached, passwords and card data taken
Submitted
by
Anonymous Coward
An anonymous reader writes "An email alert (text below) is being sent out by WHMCS ( ' the complete all-in-one client management, billing & support solution for online businesses ' they claim) at the moment, saying that their billing systems have been breached. They say that card details have been compromised, so I guess they are not PCI compliant then as they must be storing card data un-encrypted or have easy access to the encryption key. Don't see any mention of this on their site. Not a good sign for something that says it is a complete billing solution if it does not proctect card data.
Email text is as follows:
Unfortunately today we were the victim of a malicious social engineering attack which has resulted in our server being accessed, and our database being compromised.
To clarify, this was no hack of the WHMCS software itself, nor a hack of our server. It was through social engineering that the login details were obtained.
As a result of this, we recommend that everybody change any passwords that they have ever used for our client area, or provided via support ticket to us, immediately.
Regrettably as this was our billing system database, if you pay us by credit card (excluding PayPal) then your card details may also be at risk.
This is just a very brief email to alert you of the situation, as we are currently working very hard to ensure everything is back online & functioning correctly, and I will be writing to you again shortly.
We would like to offer our sincere apologies for any inconvenience caused. We appreciate your support, now more than ever in this challenging time.
----
WHMCS Limited
www.whmcs.com"
Email text is as follows:
Unfortunately today we were the victim of a malicious social engineering attack which has resulted in our server being accessed, and our database being compromised.
To clarify, this was no hack of the WHMCS software itself, nor a hack of our server. It was through social engineering that the login details were obtained.
As a result of this, we recommend that everybody change any passwords that they have ever used for our client area, or provided via support ticket to us, immediately.
Regrettably as this was our billing system database, if you pay us by credit card (excluding PayPal) then your card details may also be at risk.
This is just a very brief email to alert you of the situation, as we are currently working very hard to ensure everything is back online & functioning correctly, and I will be writing to you again shortly.
We would like to offer our sincere apologies for any inconvenience caused. We appreciate your support, now more than ever in this challenging time.
----
WHMCS Limited
www.whmcs.com"
WHMCS systems breached, passwords and card data taken More Login
WHMCS systems breached, passwords and card data taken