SBC: up to about 14,000 app member records may leak, including encrypted passwords

On 4 November SBC found that unauthorized external access to the app server may have exposed up to about 14,000 point-service member records. Fields are names, birth dates, gender, addresses, phones, emails and encrypted login passwords. Card data is excluded and no misuse has been confirmed. [1]

SBC blocked malicious traffic, stopped the affected processes, isolated the server and preserved evidence. External specialists are assisting investigation and safe rebuilding. TV/radio broadcast systems are on a separate network and broadcast operations are unaffected. [1]