ARN

EMC: RSA SecurID info swiped via sophisticated hack attack

Company exec warns customers that stolen information could be used to more easily penetrate customers' systems

EMC issued a warning today that hackers have stolen information about its RSA SecurID two-factor authentication that could be used by cybercriminals to more easily breach customers' systems,

In an open letter, RSA executive chairman Art Coviello revealed that the information was stolen via an APT (advanced persistent threat) attack.

"While at this time we are confident that the information extracted does not enable a successful direct attack on any of our RSA SecurID customers, [it] could potentially be used to reduce the effectiveness of a current two-factor authentication implementation as part of a broader attack," he wrote.

[Master your security with InfoWorld's interactive Security iGuide. | Stay up to date on the latest security developments with InfoWorld's Security Central newsletter.]

RSA is a subsidiary of EMC; its SecurID system allows admins to configure, assign, and manage token-based authentication from a central site.

According to Coviello, RSA has found no signs that the hackers made off with any customer- or employee-specific data or any information about other RSA or EMC products.

The company is providing steps for customer to take to strengthen their SecurID implementations, according to Coviello; additionally, RSA and EMC are offering customers access to internal resources and to partners to help address the situation.

Further, the company is urging customers to follow steps outlined in a SecurCare Online Note. Notably, at the time of writing, RSA's SecurCare Online website was "experiencing issues [that] may prevent your registration from processing correctly."

Nominations for the 2012 ARN IT Industry Awards open on Tuesday, June 12.

More about: APT, EMC, RSA
References show all

Comments

Post new comment

The content of this field is kept private and will not be shown publicly.
Users posting comments agree to the ARN comments policy.
Login or register to link comments to your user profile, or you may also post a comment without being logged in.
Related Coverage
Related Whitepapers
Latest Stories
Community Comments
Tags: cyber crime, EMC, hacking, intrusion, security
ARN Directory | Distributors relevant to this article
Westcon Group
ARN Directory | Vendors relevant to this article
EMC
rhs_login_lockGet exclusive access to ARN's news, research and invitation only events.
ARN Distributor Directory
Find distributors by name | vendor | location
Channel Deals
/deals/aca-pacific/441_tape-media-and-imation-dataguard-t5r-reseller-
ACA Pacific

Tape Media and Imation DataGuard T5R Reseller Promotion. Ends June 30, 2012

More details »
ARN Vendor Directory
Find vendors by name | category

iAsset is a channel management ecosystem that automates all major aspects of the entire sales,marketing and service process, including data tracking, integrated learning, knowledge management and product lifecycle management.