Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Panerabread.com leaks millions of customer records

krebsonsecurity.com

Post reply on HN
Print view View original

11–20 of 153 posts

Re: Panerabread.com leaks millions of customer records

#11

Post by awat »

portofcall wrote: post #7
dsacco wrote: post #5

So here's a fun note - as it turns out, the Panera Bread Director of Information Security mentioned in that email exchange worked at Equifax from 2009 to 2013. There's a comment mentioning it on that page, but you can find it just by looking at his LinkedIn: https://www.linkedin.com/in/mike-gustavison-b020426/ Time is a flat circle. Everything that has happened before will happen again. Every time it happens, we will…

Don’t forget, “We’re sorry,” “We’ll do better,” and my personal favorite, “Trust us!” I’d prefer crippling fines.

Absolutely agreed. It feels like corps are developing thier own infosec version of the four dogs defense.

4 DOG DEFENSE My Dog Does Not Bite. My Dog Bites, But It Didn't Bite You. My Dog Bit You. But It Didn't Hurt You. My Dog Bit You And Hurt You, But It Wasn't My Fault

http://acronymrequired.com/2011/10/the-four-dog-defense.html

Re: Panerabread.com leaks millions of customer records

#13

Post by eindiran »

awat wrote: post #11
portofcall wrote: post #7

Earlier quoted context omitted.

Don’t forget, “We’re sorry,” “We’ll do better,” and my personal favorite, “Trust us!” I’d prefer crippling fines.

Absolutely agreed. It feels like corps are developing thier own infosec version of the four dogs defense. 4 DOG DEFENSE My Dog Does Not Bite. My Dog Bites, But It Didn't Bite You. My Dog Bit You. But It Didn't Hurt You. My Dog Bit You And Hurt You, But It Wasn't My Fault http://acronymrequired.com/2011/10/the-four-dog-defense.html

This was a very interesting read.

Re: Panerabread.com leaks millions of customer records

#15

Post by ryandrake »

dsacco wrote: post #5

So here's a fun note - as it turns out, the Panera Bread Director of Information Security mentioned in that email exchange worked at Equifax from 2009 to 2013. There's a comment mentioning it on that page, but you can find it just by looking at his LinkedIn: https://www.linkedin.com/in/mike-gustavison-b020426/ Time is a flat circle. Everything that has happened before will happen again. Every time it happens, we will…

Well, it costs nothing to put out a press release saying something “is out top priority” and “being taken seriously” and not do anything.

Re: Panerabread.com leaks millions of customer records

#16

Post by pixl97 »

awat wrote: post #11
portofcall wrote: post #7

Earlier quoted context omitted.

Don’t forget, “We’re sorry,” “We’ll do better,” and my personal favorite, “Trust us!” I’d prefer crippling fines.

Absolutely agreed. It feels like corps are developing thier own infosec version of the four dogs defense. 4 DOG DEFENSE My Dog Does Not Bite. My Dog Bites, But It Didn't Bite You. My Dog Bit You. But It Didn't Hurt You. My Dog Bit You And Hurt You, But It Wasn't My Fault http://acronymrequired.com/2011/10/the-four-dog-defense.html

This sounds like a dog version of the narcissist prayer.

Re: Panerabread.com leaks millions of customer records

#17

Post by ribosometronome »

changoplatanero wrote: post #10
delfb wrote: post #8

Earlier quoted context omitted.

That could’ve easily been a really boring office lunch option binder, though. ;)

It was a hundred panera bread's from all over the East Coast. Something suspicious was going on...

Do you think it could have been some sort of investigation? Like they say, criminals aren't born, they're bread.

Re: Panerabread.com leaks millions of customer records

#18

Post by JohnJamesRambo »

Is there any hope companyies like the Y Combinator backed Request Network can save us from this happening over and over?

A summary of their plan is at https://request.network.

What things would prevent them from implementing this? Seems like a great way to stop losing credit card and identity info in breach after breach.

Re: Panerabread.com leaks millions of customer records

#20

Post by tyingq »

portofcall wrote: post #7
dsacco wrote: post #5

So here's a fun note - as it turns out, the Panera Bread Director of Information Security mentioned in that email exchange worked at Equifax from 2009 to 2013. There's a comment mentioning it on that page, but you can find it just by looking at his LinkedIn: https://www.linkedin.com/in/mike-gustavison-b020426/ Time is a flat circle. Everything that has happened before will happen again. Every time it happens, we will…

Don’t forget, “We’re sorry,” “We’ll do better,” and my personal favorite, “Trust us!” I’d prefer crippling fines.

"I’d prefer crippling fines"

Probably won't happen until some Senator gets personally burned. Equifax hasn't suffered much, for example, and they released almost all of their info for every adult in the US that ever used a credit card or had a mortgage.

I'm almost wishing some activist hacker would buy the data for the House and Senate reps and go to town...just to get their attention. Purchase pornhub accounts , shady drug site stuff, escorts, etc, and start sharing it publicly.

Post reply on HN