Security threats Toolkit

Police investigate charity hack

Andy McCue silicon.com

Published: 12 Dec 2005 15:00 GMT

Police at Scotland Yard's computer crime squad are investigating the hacking of a UK charity Web site that has resulted in the theft of almost 3,000 credit card details.

Hackers breached the security of the Aid to the Church in Need Web site on Sunday 27 November and stole the credit card details, names and addresses of 2,800 charity donors held on the system.

The fraudsters have already used the stolen credit card details and have even telephoned some of the victims directly pretending to be from the charity and asking for money.

The Web site was taken offline as soon as the breach was discovered but it is not known yet how the hackers broke in. A spokesman for the charity told ZDNet UK sister site silicon.com: "We are not able to divulge how they got in the Web site for security reasons."

Neville Kyrke-Smith, UK national director of Aid to the Church in Need, has already contacted over 2,800 charity donors identified as being at risk and said the Web site will remain offline until the matter is resolved.

Kyrke-Smith said he believes the charity was specifically targeted in the run-up to Christmas despite having a "professionally designed Web site" with encryption and secure server access.

He said: "There is a conspiracy of silence over the question of Internet security, as only one in eight computer crimes is apparently reported. We wanted to be honest and would urge people to be vigilant, particularly at this time of the year."

The charity now fears the hack attack will hit fund-raising for crucial aid projects in Iraq, Pakistan and Sudan.

Did you find this article useful?
60 out of 111 people found this useful

Post a comment

Full Talkback thread

0 comments

More In Security threats

Related Jobs

INFORMATION SECURITY OFFICER

Introducing monitoring, auditing and assessment tools and methodologies to aid the project. Performing regular Information Security risk assessment ...

SAP BCS Support Consultant

The suitable candidate will be part of the existing BI Team in order to support the BCS solution and aid the support of other BI Functional areas. ...

Statistical Information Manager - Clinical Charity Company.

You will assist in the planning, development and delivery of the statistical information service within this large Cancer Charity Organisation. Are ...

Featured Talkback

On the contrary, if vendors were forced to stand behind their products it should increase innovation. It would force more, and better , testing before hitting the sales floor, resulting in fewer updates and less downtime for the consumer. At present the EULA removes responsibility from the vendor, and moves it to the user, which is a step backward. Make the vendor responsibility for their code.