With the respect to the password, there was an additional log from the hacker stating that the key password was held in memory and was accessed by him via Cold

With the respect to the password, there was an additional log from the hacker stating that the key password was held in memory and was accessed by him via Cold Fusion. He claims to have been able to decrypt the credit card data at that point. He did state that he only decrypted a couple of them and that he has also destroyed the data since Linode's blog post went live. - The above info came from line 75 of the following pastebin: http://pastebin.com/7WXRDyAg http://pastebin.com/7WXRDyAg 07:52 < HTP> the CCrypter class of the linode application context was accessable from outside the wwwroot using undocumented ColdFusion methods. i was fully able to decrypt the ccs using the in-memory privkey that they supplied the password for. - I have no idea of the validity of any of that information. To be safe, I have modified my keys/passwords and have deactivated the card number associated with the account. I figure playing on the safe side is better and that changing everything will result in fewer "surprises."