Facial recognition company Clearview’s client list stolen by “intruder”

From the article:<p>&quot;Security is Clearview&#x27;s top priority,&quot; he said in a statement provided to The Daily Beast. &quot;Unfortunately, data breaches are part of life in the 21st century. Our servers were never accessed. We patched the flaw, and continue to work to strengthen our security.&quot;<p>Servers never accessed? Then how was the client list stolen? Was a paper copy stolen from a filing cabinet? I find this posture somewhat arrogant and dismissive. Also, the article is light on technical details- does anyone have info on what flaw was exploited and patched?

World&#x27;s smallest fiddle. I hope they get the ever living snot sued out of them so they understand they can&#x27;t throw security to the four winds and just swim around in their profits. They were reckless and irresponsible in assembling that data and I have no doubt they were reckless and irresponsible in storing it.

I apologise for a low value comment, but I can&#x27;t resist the opportunity:<p>Did Clearview get a picture of the &#x27;intruder&#x27;?

some earlier discussion:<p>&gt;The firm drew national attention when The New York Times ran a front-page story about its work with law-enforcement agencies. The Times reported that the company scraped 3 billion images from the internet, including from Facebook, YouTube, and Venmo. That process violated Facebook’s terms of service, according to the paper. It also created a resource that drew the attention of hundreds of law-enforcement agencies, including the FBI and the Department of Homeland Security, according to that report. In a follow-up story, the Times reported that law-enforcement officials have used the tools to identify children who are victims of sexual abuse. One anonymous Canadian law-enforcement official told the paper that Clearview was “the biggest breakthrough in the last decade” for investigations of those crimes.<p><a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=22424828" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=22424828</a><p><a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=22426599" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=22426599</a>

&gt;Unfortunately, data breaches are part of life in the 21st century.<p>They are not. Just don&#x27;t collect the data in the first place.

&gt; “Security is Clearview’s top priority,”<p>Clearly...

I know not popular, but set your email and other retention periods to a relatively short time frame - even a year or two drops tons of sensitive data off. Flag important or file elsewhere for stuff you want to keep.

No doubt the same &quot;intruder&quot; who hacked the Office of Personnel Management a few years ago.