Nixon Williams hit by Cyber Security incident

[Fred Bloggs]

Oh great.

Anyone been able to pull all the files down to check their exposure? I've tried but the server is taking a hammering.

At first sight: a lot of spreadsheets, PDFs, scans of passports... doesn't appear to be benign data in any sense.

Passports? Oh dear. I have always had very bad feelings about companies routinely requiring an individual handing over their passport details. It just feels wrong. This simply justifies my fears about (non) security of data.

[PerfectStorm]

Jesus, I'm glad I got out when I did https://uk.trustpilot.com/review/www.nixonwilliams.com

[agentzero]

Oh great.

Anyone been able to pull all the files down to check their exposure? I've tried but the server is taking a hammering.

At first sight: a lot of spreadsheets, PDFs, scans of passports... doesn't appear to be benign data in any sense.

What server are you downloading from? The first one I've looked at has a lot of raw database files that are not formatted, or have been sanitised before being dumped into a database file. There are no passport details but there is everything else an identity thief would want.

You can email Doug Crawford to ask why his amateur oversight resulted in this hack, but you will just get an out of office response that he isn't in the office.

[email protected]

[PerfectStorm]

What server are you downloading from? The first one I've looked at has a lot of raw database files that are not formatted, or have been sanitised before being dumped into a database file. There are no passport details but there is everything else an identity thief would want.

I won't link it here, but it's all absolute files - PDFs, images, spreadsheets - nothing as complex as a database and so many files the index.html won't finish loading while it's still on the "A"s. Seems to contain every file the company ever owned, or something close to.

It's mentioned in the article - Vice Society's blog, which is available on the clear net by appending .ly to the TLD - you'll be on the right track if you find a purple coloured website where the first link is a link to the Optionis files, presented as an HTTP folder full of files.

[Fred Bloggs]

I won't link it here, but it's all absolute files - PDFs, images, spreadsheets - nothing as complex as a database and so many files the index.html won't finish loading while it's still on the "A"s. Seems to contain every file the company ever owned, or something close to.

It's mentioned in the article - Vice Society's blog, which is available on the clear net by appending .ly to the TLD - you'll be on the right track if you find a purple coloured website where the first link is a link to the Optionis files, presented as an HTTP folder full of files.

[Fred Bloggs]

What server are you downloading from? The first one I've looked at has a lot of raw database files that are not formatted, or have been sanitised before being dumped into a database file. There are no passport details but there is everything else an identity thief would want.

You can email Doug Crawford to ask why his amateur oversight resulted in this hack, but you will just get an out of office response that he isn't in the office.

[email protected]

I hope the corporate meltdown at the hacked businesses is so serious that the whole thing collapses into oblivion. The whole saga from the takeover by private equity has been appalling. How they even still have enough customers to complain is beyond me. The only folks I feel sorry for at the moment are the probably over worked, under paid and thoroughly pi55ed off infantry trying to patch things up. Though equally, I imagine anyone with a reasonable skill set left these firms a long time ago.

[agentzero]

I won't link it here, but it's all absolute files - PDFs, images, spreadsheets - nothing as complex as a database and so many files the index.html won't finish loading while it's still on the "A"s. Seems to contain every file the company ever owned, or something close to.

It's mentioned in the article - Vice Society's blog, which is available on the clear net by appending .ly to the TLD - you'll be on the right track if you find a purple coloured website where the first link is a link to the Optionis files, presented as an HTTP folder full of files.

It's already been repackaged for sale on various tor market sites, some available through https://dark.fail

The data released isn't the full set, for certain. It's a mix of NW, Clearsky, Parasol and SJD. It seems to be an initial release. I would think Vice are in contact with Optionis to negotiate some crypto before releasing the rest in sets. The summary in security circles is that Vice managed to export everything, which means that the number of files must be in the hundreds of thousands. TrustPilot does reflect the reality, people are angry and are right to be angry.

Why are there .FLAC music files on optionis servers? For staff to relax to after a hard live chat session?

[SueEllen]

For those who have had data stolen Cifas Protective Registration
https://www.cifas.org.uk/pr

[Andy Hallett]

Why are there .FLAC music files on optionis servers? For staff to relax to after a hard live chat session?

The audiophile in me respects that. Would have made the download take longer as well.

[PerfectStorm]

Interestingly, they haven't notified former customers of any breaches.

This means one of two things, that nothing was breached for customers they don't have any more... or data was breached, and they're failing in their statutory duties.

Which do you think it is?