US Telco Support > Verizon > Verizon Fiber Optics > ZDNet: Hacker nabs 3m Verizon customer records

ZDNet: Hacker nabs 3m Verizon customer records

I took a look so I can sleep tonight and it's only PA customers in the leaked database from what I could tell.

quote:

---

"The hacker said that the leaked customer data suggests it came from customers in "Pennsylvania and maybe two more states around it."

"I might leak the rest later," he noted.

---

reply to Morris0
Hm.. no wonder Verizon asked for a PIN number when I called on Wednesday to place an order.

I changed my password after the hack happened but should I change again?

Edit: I'm going to change my password just to be safe.

Off-topic but I was briefly scanned the bundle the customers have and 99.99% don't have the 150/65 package let alone the 300/65 option. Most are the 15/5 package. How sad

reply to Morris0
Great, VZ didn’t have the balls to tell the folks that could have been affected so we had to come here and find out from another member that VZ security has more holes in it than the Swiss cheese at the local deli. This is the best part,“Tibit gained access to a server with little difficulty after working with another hacker to identify the security flaw”. After seeing that it is clear security is not a high priority at VZ. Maybe some of the VZ employees that are forum regulars here would like to chime in and tell us how great VZ security is.

I'm reading more online that Verizon is now sending out emails to the websites stating that this is not true or at least exaggerated.

»www.databreaches.net/?p=26501

VZ is talking out of both sides of their mouth.

quote:

---

No Verizon systems were breached, no root access was gained, and this incident impacted a fraction of the number of individuals being reported.

---

reply to Morris0
Lovely.

And since Verizon is Verizon, I'm trying to change my password but it keeps telling me my "old" password is incorrect, which it isn't. So I can't do anything.

Also, if you try to use a number as the first character in a new password, it won't recognize the password as valid.

Looks like VZ did get hacked and those in PA got effected if you're correct. How are you able to login nowayout? Since you mention that your old password is incorrect.

I think I will have to agree with you yurimaster

reply to yurimaster

Cool, I went ahead and change my password just for safety.

reply to More Fiber

reply to Morris0
The VZ Central site is not working correctly. I have Win7 Pro SP1 with IE9 and FF 17.0.1 on my desktop system. Once I logon to VZ portal the select profile and then Manage it will not respond to Manage with either browser. I then fired up my laptop with Linux Mint and FF 17.0.1 and the result is the same, no response on Manage.

When I logged into VZ Accounts and Billing (why two portals is beyond me) I was prompted for password change upon logon however it would not accept new password, it said try again later. I see things are working great at VZ

reply to Morris0
Ugh... is it too much to ask Verizon use some of their development talent to make security tighter and navigating easier, instead of bombarding us with stuff to sell every time we logon?

I would be happy if they just fixed their damn website. Some account functions have been broke for almost an entire year now on the business side.

reply to Morris0
Just an update… some of you who migrated from DSL several years ago may have the same issues I did when trying to resolve this with the VZ support. We had two portal logins setup which I knew about because this how it use to work. The first is to manage & create sub accounts, manage web space and access webmail. The second logon was for VZ Billing only. The first account is a .net logon and the second is a .com account. Either of the old URL’s I have stored in my password manager will take me to VZ Central whereas in the past it was two different sites. As some of you know VZ brought both sites together a few years ago. Their error was not removing the second set of credentials. My guess is this is only likely to impact users who have had VZ Online the services for several years and this is a non-issue for new customers.

It took VZ 90 minutes to come to the conclusion they could not delete the .com account. VZ did force password changes on both accounts since either logon would not allow me to change my passwords. Strangely enough I was able to change the sub-account with no issue. All is good for now, passwords are changed and no issues with pop mail with new passwords.

reply to Morris0

reply to Morris0
That's definitely Verizon customer data. I found my uncle's info on there as well as one of my co-workers. Seems to be PA customers only. My parents do not appear to be on there though.

reply to Morris0
Thanks Morris0! KUODS to you.
I tried to login to My Verizon www22.verizon... and it said account locked (I normally only login once a month to check my bill and see if emails are being saved; I use ZOHO to manage mail).
So I used forgot password dialog, and had to use PIN sent to my telephone. Anyway all good now