token) that is used to identify the payment, but does not allow the card to be viewed or charges to be made on its own. This code has no value outside the payment system and cannot be used fraudulently. For this reason, there is no risk of bank details being stolen”; nor are customer passwords, as “they are never stored in our database. Instead, they are converted into a secret, encrypted code (hash). This code is irreversible, which means that neither we nor anyone else can see the original password.”Finally, PcComponentes reports that it has implemented a series of measures aimed at minimizing the impact of this incident, which “significantly strengthen account protection and reduce the risk of illegitimate access from compromised databases outside PcComponentes that are published on the internet.”This article originally appeared on Computerworld/CSO España.
First seen on csoonline.com
Jump to article: www.csoonline.com/article/4120572/a-hacker-using-the-alias-daghetiaw-claims-to-have-breached-the-security-of-pccomponentes.html
