Saudi Arabian Hackers Leak Credit Card Details of 400,000 Israeli Citizens

I just gave a talk last week at 28C3 [1,2] about how all the personal details of Israeli citizens are up for grabs for anyone inclined enough to get them.<p>I'm ashamed to see that we've learned nothing in the past 10 years.<p>[1] - <a href="http://www.youtube.com/watch?v=ow7cvZOzp6w" rel="nofollow">http://www.youtube.com/watch?v=ow7cvZOzp6w</a><p>[2] - <a href="http://speakerdeck.com/u/yuvadm/p/28c3-data-mining-the-israeli-population-census" rel="nofollow">http://speakerdeck.com/u/yuvadm/p/28c3-data-mining-the-israe...</a><p>EDIT: Israeli media now claims that 400K is an exaggerated number, and the actual number of leaked CC is much smaller.<p>EDIT2: I'm gonna go ahead and publish a mirror list [3] for the leaked data and for affected accounts by email [4]. I might be affected and I prefer to know if I am ASAP, even if this means the data leaks more, which it will anyway.<p>[3] - <a href="http://pastebay.com/186092" rel="nofollow">http://pastebay.com/186092</a><p>[4] - <a href="http://pastebin.com/EnY7E0Hw" rel="nofollow">http://pastebin.com/EnY7E0Hw</a>

I have a very hard time resolving how this type of attack could fall under the umbrella of Anonymous. Saudis specifically attacking Israel implies a nationalistic attitude, given their history. They also affiliate their hacker group with Wahabbism, which is a strict branch of Islam that most would brand as fundamentalist (and sometimes extreme).<p>I can't really see the ideals of Anonymous coexisting with nationalism and religious fundamentalism.

Anonymous just declared that they are not responsible for this:<p><a href="https://twitter.com/anonyops/status/153969476277248000" rel="nofollow">https://twitter.com/anonyops/status/153969476277248000</a><p>"We have no love for Israeli gov't but targeting 1000s for being Israeli? Sorry, you are not #Anonymous pastebay.com/148920"

This is the IP of the hacker: 188.75.86.66 (It's possible this is a bounce server, but geo locating it suggests against this.)<p>I know because I was involved in cleaning up one of the hacks. (I have to stay anonymous, but my main account has more than 7000 karma.)<p>In the one I dealt with they did not copy stored cards (because they couldn't), but rather added extra code that would email a copy of the details to the hacker as the order was placed.<p>(So even with PCI compliance credit card numbers can still be stolen.)

My CC was in the list that the hackers published. Just canceled it...<p>Does anyone have good arguments against leaving the files where they are now and not deleting them from pastebin/megaupload/...? Since the beast is already out of it's cage, there is no point in chasing it. It is even better to let the public d/l the file and try to find themselves if their card and other details like emails, passwords were stolen.

I have an israeli credit card. I'd have liked to understand where this was leaked from. And - well - make sure that mine is not among them.<p>Unfortunately (or fortunately?) the file isn't available any more.

Curious to see how the general consensus of Anonymous falls in line with this. Lets not forget the long history of black hats in Israel.

Interesting. I wonder, have there been other examples of religiously-motivated hacks on this scale?

When I went to Israel a few years back I could not believe my eyes when I noticed that my entire CC number was printed on every receipt.<p>I don't imagine online CC security being much better..

I thought Anonymous were against corrupt politicians et al, and not just general populace :(

Don't VISA et al require some kind of PCI compliance for storing credit card details?

Just because is easy, it doesn't mean you should do it. Stealing from ordinary people even from nation that you feel so much hostility to, still it is wrong.

Faction warfare.<p>EDIT: I got downvoted, without a reply. So, explain how doing this sort of thing is not faction warfare?<p>The details of israeli credit is leaked by anons from the house of Saud. This is clearly a faction issue. It is not likely government sponsored (though likely condoned) and as a religious rift exists between jews and muslims, the word faction applies perfectly.<p>Jews, muslims, christians; all factions within religious zealotry.

I find it odd they call themselves “Wahhabis.” For starters, that term isn't something a “Wahhabi” would call himself. I've never been able to trace when it was first used. However, it's often used by western scholars to refer to “the Saudi guys” when classifying Muslims.<p>Does anyone know more about this group?

&#62; We have posted this message in pastebin, but it seems they have deleted the file.<p>That Stratfor dump with 75.000 card details is still on Pastebin. Why this one deleted and the other is still there? (I believe both should be deleted.)

Attacking the general (innocent) populace for the faults of their government/military? That's the definition of terrorism... and not activism.

too much fuss for something you can not verify. a)are they really valid identities. %100 of them? b) how do you know that these were done by Saudis?

I've set up a site to check if your card was on the list. Just go to my site and type in your card number...

Stay classy...

From what I can see, the real Anonymous at least has the balls to go after their <i>own</i> government. Sure it's easy to hate on Israel, and these douchebags will no doubt get some props from fellow haters for their little hack, but if they had a pair of testicles between the lot of 'em, they'd start leaking info on the dictatorship they live in, rather than stealing credit cards from the democracy next door.