Interesting People mailing list archives

Important Information About Your iPad 3G


From: Dave Farber <dfarber () me com>
Date: Mon, 14 Jun 2010 07:10:45 -0400


I also got one. Djf


Begin forwarded message:

From: John Pettitt <jpp () cloudview com>
Date: June 14, 2010 12:01:48 AM EDT
To: dave () farber net
Subject: Fwd: Important Information About Your iPad 3G


For IP

FYI - just got this

Begin forwarded message:

From: "AT&T Chief Privacy Officer" <IPAD.06132010.057807 () econfirmation att-mail com>
Date: June 13, 2010 9:00:09 PM PDT
To: "AT&T iPad 3G Customer" <jpp () cloudview com>
Subject: Important Information About Your iPad 3G

             
 
 
 
 
             
             
             
     
June 13, 2010

Dear Valued AT&T Customer,

Recently there was an issue that affected some of our customers with AT&T 3G service for iPad resulting in the 
release of their customer email addresses. I am writing to let you know that no other information was exposed and 
the matter has been resolved.  We apologize for the incident and any inconvenience it may have caused. Rest assured, 
you can continue to use your AT&T 3G service on your iPad with confidence.

Here’s some additional detail:

On June 7 we learned that unauthorized computer “hackers” maliciously exploited a function designed to make your 
iPad log-in process faster by pre-populating an AT&T authentication page with the email address you used to register 
your iPad for 3G service.  The self-described hackers wrote software code to randomly generate numbers that mimicked 
serial numbers of the AT&T SIM card for iPad – called the integrated circuit card identification (ICC-ID) – and 
repeatedly queried an AT&T web address.   When a number generated by the hackers matched an actual ICC-ID, the 
authentication page log-in screen was returned to the hackers with the email address associated with the ICC-ID 
already populated on the log-in screen.

The hackers deliberately went to great efforts with a random program to extract possible ICC-IDs and capture 
customer email addresses.  They then put together a list of these emails and distributed it for their own publicity.

As soon as we became aware of this situation, we took swift action to prevent any further unauthorized exposure of 
customer email addresses.  Within hours, AT&T disabled the mechanism that automatically populated the email address. 
Now, the authentication page log-in screen requires the user to enter both their email address and their password.

I want to assure you that the email address and ICC-ID were the only information that was accessible. Your password, 
account information, the contents of your email, and any other personal information were never at risk.  The hackers 
never had access to AT&T communications or data networks, or your iPad.  AT&T 3G service for other mobile devices 
was not affected.

While the attack was limited to email address and ICC-ID data, we encourage you to be alert to scams that could 
attempt to use this information to obtain other data or send you unwanted email. You can learn more about phishing 
by visiting the AT&T website.

AT&T takes your privacy seriously and does not tolerate unauthorized access to its customers’ information or company 
websites.   We will cooperate with law enforcement in any investigation of unauthorized system access and to 
prosecute violators to the fullest extent of the law.

AT&T acted quickly to protect your information – and we promise to keep working around the clock to keep your 
information safe.  Thank you very much for your understanding, and for being an AT&T customer.

Sincerely,

Dorothy Attwood
Senior Vice President, Public Policy and Chief Privacy Officer for AT&T

Please do not reply to this email. This address is automated, unattended and cannot help with questions or requests.


© 2010 AT&T Intellectual Property. All rights reserved. AT&T and the AT&T logo are trademarks of AT&T Intellectual 
Property.


             




-------------------------------------------
Archives: https://www.listbox.com/member/archive/247/=now
RSS Feed: https://www.listbox.com/member/archive/rss/247/
Powered by Listbox: http://www.listbox.com

Current thread: