Israeli cell phone company Hacked, check to see if you were targeted..

[Yammer]

Shame. I wonder why the "hacker" decided to release the information a year after it was obtained. Probably more likely an inside job. Either way, the company can use some help in their handling of the situation. No apology, just a try to move the link. Like that will help, it's on every WhatsApp group by now. It's a major breach of privacy and they are pretending it's small leak with outdated information...

Maybe the list was sold to some Nigeria "firm" that specializes in credit card numbers of other ppl.

[Twin]

I work for cellularisrael.com  ☺
My history of posts should show that....

my mother is on the lis and she was never contacted.

[Yisroel Tech]

I know of 2 people that had active cards and were not contacted. they both called bank this morning to cancel the card
Mistakes can happen, but excuses that are not true dont look good

my mother is on the lis and she was never contacted.

To be devil's (not really but you know what I mean...) advocate: did these, non-contacted, people use cellularisrael.com themselves? Becuase I assume that cellularisrael.com contacted the individuals that gave them the affected card trough the email address the has on file. So if your brother used your mother's CC for cellularisrael.com and gave his own email address he'd been the one contacted and not your mother. (hope no-one expects them to do people searches for all these names and trace them down, no company breached have ever done that. The most a company can be asked to do is inform the people that had the account with them.)

[danny.arnold]

Cellular Israel response is shocking! Their handling of situation is atrocious and the lie spewing gotta stop. Did anyone see an actual apology?

[Yisroel Tech]

Cellular Israel response is shocking! Their handling of situation is atrocious and the lie spewing gotta stop. Did anyone see an actual apology?

Whoa whoa! Tone down a bit, the overly exaggerated language does not make your point being truer. Which lies exactly? And is that shocking? And what if there was no apology?

[bitbythedog]

What are they supposed to apologize about , that a Vietnamese hacker stole information from them . ?

[googwallet]

What are they supposed to apologize about , that a Vietnamese hacker stole information from them . ?

Yes precisely. Compare their letter to other letters released from companies that had a security breach. In the latter, the information wasn't even released and they still send out an email informing anyone involved. Because that's how you need to treat the situation.

In this case, they knew about it a year ago and didn't say anything because they thought they could get away with it. Now that's it's public, they are giving some lousy explanation without any apology for people's personal information circling around the public.

[shulem92]

People have gotten letters in the mail. Just not everyone

[bitbythedog]

Yes precisely. Compare their letter to other letters released from companies that had a security breach. In the latter, the information wasn't even released and they still send out an email informing anyone involved. Because that's how you need to treat the situation.

In this case, they knew about it a year ago and didn't say anything because they thought they could get away with it. Now that's it's public, they are giving some lousy explanation without any apology for people's personal information circling around the public.

No one knew the extent of it until recently . customers that were suspected to have information breached were notified immediately. Recently they found out more and reached out to whomever still had active cards.

Professional enough if I was judging. You just don't know the whole picture so your quick to throw someone under the bus.

Try building a proper picture before you jump to conclusions.

[googwallet]

No one knew the extent of it until recently . customers that were suspected to have information breached were notified immediately. Recently they found out more and reached out to whomever still had active cards.

Professional enough if I was judging. You just don't know the whole picture so your quick to throw someone under the bus.

Try building a proper picture before you jump to conclusions.

Not professional at all IMHO. "Active cards"? It's doesn't matter if the the card is active or not (neither do they truly know because expired doesn't mean inactive).

My point is that having names and addresses leaked to the public is enough to warrant a notification and an apology to everyone involved. The credit card is information is frankly irrelevant in this regard.

[yuneeq]

No one knew the extent of it until recently . customers that were suspected to have information breached were notified immediately. Recently they found out more and reached out to whomever still had active cards.

Professional enough if I was judging. You just don't know the whole picture so your quick to throw someone under the bus.

Try building a proper picture before you jump to conclusions.

Not professional AT ALL.
The minute they notice a breach they should be preparing to notify ALL customers.
They had no idea to the extent of the breach?
So what! It doesn't mean that customers that were potentially breached don't have the benefit of knowing that their data was stored insecurely and was potentially stolen!

[yuneeq]

Their site seems to be compliant I heard the breach happened in middle of a security update and is waay outdated.

"Compliant" and credit cards stored in plain text do not go together.
Even if there's an excuse for storing credit card numbers, there's no excuse for not encrypting the information.

Rather it sounds like this company was storing everyone's full data in an excel sheet or an unsecured database and it was hacked.
Instead of deflecting blame they should admit that their security practices were non-existent and that ALL customers should have a right to be notified.

[A3]

It shouldn't be about what the company has to do, vs what the company should have done.

If the company is having that debate, they are failing at consumer service and protection.

This discussion, this thread, this news should have been out over a year ago.

They claim everyone was contacted, yet over numerous forms of social media I keep seeing comments saying they were never commented.

Did the company think this would be hidden forever? Maybe they hoped so?

#fail.

[A3]

About a year ago our database was hacked and there was an unauthorized access to our customers' information. Since them we added many security features and encryption, involved the appropriate authorities and raised the level of awareness, to continue to protect the information of our customers.

Recently if has come to our attention that the the information is still available online. We have already reached out the the web hosting of that site as well as the domain registrar to have it removed, however it seems that this is not a simple quick process. All of the available information is outdated and unusable as we contacted our  loyal customers to cancel their card (if we haven't heard from them that they have already done so).  Feel free to contact us if you have any more questions or comments.

Dovy Schwarzmer
CellularIsrael.com

When was this notice sent out? Either way, "about a year ago" to late.

[AnonymousUser]

When was this notice sent out? Either way, "about a year ago" to late.

Maybe they sent it out a year ago, when it happened?

[shulem92]

Is it just me or does anyone else find the title funny? Targeted? Sounds like a good thing on these forums...

[Yammer]

"Compliant" and credit cards stored in plain text do not go together.
Even if there's an excuse for storing credit card numbers, there's no excuse for not encrypting the information.

Rather it sounds like this company was storing everyone's full data in an excel sheet or an unsecured database and it was hacked.
Instead of deflecting blame they should admit that their security practices were non-existent and that ALL customers should have a right to be notified.

If their site wasn't PCI compliance then there will be some lawsuits. Unless there are different laws in Israel.

Anyone?

[danny.arnold]

For all of you who are defending CI: My name and info is on that list and the info is ACTIVE and not outdated. I did not receive any notice from CI till after the story broke yesterday. And the notice as you can see makes up some shabby excuses and spews lies. If there is a lawsuit I would love to join. I am furious that my info was public for over a year without CI informing me.

[myi]

Is it just me or does anyone else find the title funny? Targeted? Sounds like a good thing on these forums...

I found it a bit funny as well, what a coincidence. lol
   

Don't use chrome on your phone? Find in page works well for me.

That's an app? Or you can view it like that after its saved as a file. I know with a BlackBerry you can use find on page while in the browser. 

[jj1000]

I found it a bit funny as well, what a coincidence. lol
    That's an app? Or you can view it like that after its saved as a file. I know with a BlackBerry you can use find on page while in the browser. 

In the browser you can search just like Ctrl f on desktop.