Tell HN: Scribd Breached
344 points by x______________ 1 day ago | 121 comments
tl;dr: Scribd (parent of Slideshare, Everand, and Fable) notified users of a security breach in which an unauthorized third party accessed data including email addresses, last 4 digits of credit cards, card issuer, expiry date, and payment history. Scribd says the affected system has been secured, law enforcement and data protection authorities have been notified, and users should stay alert for phishing attempts. No evidence of misuse has been reported so far.
HN Discussion:
  • ↓Scribd is a predatory company that deserves no sympathy for being breached
  • ~This is a recurring pattern — Scribd was breached similarly 13 years ago
  • ↓Companies should disclose which specific systems were breached, not vague 'our systems' language
  • •Payment data breaches could be prevented by banks offering one-time or vendor-locked payment codes
  • ↓Questioning the delayed and staggered breach notification timeline given payment data was involved