Adobe admits IP and records on 2.9 million customers siphoned

The goods targeted include Adobe Acrobat, ColdFusion, and the ColdFusion Builder. The company has been robbed of product source code and sensitive client information, Adobe officials disclosed. But officials claim that the source code incident did not create software vulnerabilities, such as “zero day” program holes.

Outsiders also stole details on nearly 3 million Adobe customers, including customer names, encrypted credit or debit card numbers, expiration dates, and other information relating to customer orders. In addition, they got their hands on Adobe customer IDs and encrypted passwords.

Brad Arkin, the company’s chief security officer, said in a blog entry that the two breaches seem to be related.  

KrebsOnSecurity’s Brian Krebs reported that the company “first became aware of the source code leak roughly one week ago, when this author — working in conjunction with fellow researcher Alex Holden, CISO of Hold Security LLC — discovered a massive 40 GB source code trove stashed on a server used by the same cyber criminals believed to have hacked into major data aggregators earlier this year, including LexisNexis, Dun & Bradstreet and Kroll.”

Arkin told Krebs that the intruders apparently wiggled inside through “some type of out-of-date” software.”

ThreatWatch is a regularly updated catalog of data breaches successfully striking every sector of the globe, as reported by journalists, researchers and the victims themselves.