Seagate's LaCie Admits To Customer Data Breach Lasting A Year
Everything about this situation is disturbing. There's the fact that this went on for so long unbeknownst to LaCie, and also that after being alerted to the situation on March 19, 2014, LaCie waited almost an entire month to let affected customers know, issuing notices on April 11, 2014.
"The information that may have been accessed by the unauthorized person may include customers’ names, addresses, email addresses, and payment card numbers and card expiration dates. Customers’ LaCie website user names and passwords could also have been accessed, which is why we required a reset of all passwords," LaCie said.
LaCie has hired a "leading forensic investigation firm" that's currently looking into the matter. The firm is also helping LaCie implement additional security measures to make sure something like this doesn't happen again. In the meantime, the company has stopped accepting orders as it revamps its payment processing services.