Vengeful hacker exposes DomainFactory customer banking data and passwords
A German web-hosting firm has suffered a severe data breach because one of its customers reportedly owed money to the attacker. The company only learned of the breach when the hacker announced it himself, on its support forum.
On Jan. 29, the attacker compromised customer names, company names, various addresses, telephone numbers, DomainFactory passwords, dates of birth, bank names and account numbers, and Schufa scores (German credit score).
However, the company and its customers only learned of the breach six months later, on July 3, when he made an entry on the DomainFactory support forum to break word of his deed. As proof, he published the data of a number of customers for everyone to see. The reason behind the attack, according to German news outlet Heise Online, was to obtain the credentials of an customer who owed the attacker money. When he noticed that DomainFactory was reluctant to acknowledge the breach, he decided to make it public.
