3 ms·
> The Marriott CEO said again that investigative efforts have yet to uncover evidence to suggest that hackers gained access to the encryption key used to encryp
by elliekelly 8y ago
> The Marriott CEO said again that investigative efforts have yet to uncover evidence to suggest that hackers gained access to the encryption key used to encrypt the payment card numbers, meaning that most of the compromised payment card numbers are still useless to attackers.
So the clearly sophisticated hacker(s) had access to the network for four years yet somehow forgot the private keys to decrypt the millions of records they went through all that effort to steal?
- linsomniac 8y agoI think you are misunderstanding... They got dumps of a couple of databases, which they encrypted, downloaded, and presumably decrypted. Those dumps themselves contained a credit card number that was encrypted by Marriott with a key they don't think the attackers got. That is my read of it anyway.