3 ms·
Couple of things are pretty apparent from the post: 1. Why would compromised developer account cause such a hack? Unless they don't have proper data control in
by thisisit 9y ago
Couple of things are pretty apparent from the post:
1. Why would compromised developer account cause such a hack? Unless they don't have proper data control in place for production access.
2. The line about how "payment" related information is under PCI DSS compliant shows how these guys are running their business. I frequently see people, who are confronted about not following some form of compliance or hack, argue back on "segregation" of compliance. They say - X data needs (or was) to be compliant while Y doesn't. Sure not everything needed to be PCI DSS compliant but why not have better practices?
3. What about PII (Personally identifiable information) data they collect? Isn't that supposed to be rigorously protected? It seems they believe only payment and passwords are of use to hackers.