Rand McNally company - if you have one of their products

[Ray,IN]

I received this email today, it sounds like their computer system has been hacked. Quote: "Dear Valued Customer,

Rand McNally recently discovered a disruption to certain portions of our computer network. We commenced an immediate investigation that included taking certain systems offline and working with computer forensic specialists to determine the nature and scope of the event. We are working diligently to restore the functionality of our systems. We appreciate your patience and understanding and apologize for any inconvenience.

Thank you,
Rand McNally "
I expect more notification emails in the near future concerning how much of our information was available to the hacker(s).

[Skip426]

Lovely .

I guess the only good news is that I purchased from an independent dealer ; and RM has none of my C/C info on file.

[Ray,IN]

Same with me, however I did register it with RM after purchase though, and through the Dock software for updates.

[NXR]

This is not their first time: https://www.doj.nh.gov/consumer/secu...y-20170505.pdf

Ray

[Ray,IN]

Todays update:

Dear Valued Customer,

As you may be aware, Rand McNally recently discovered a disruption to certain portions of our computer and phone network. We commenced an immediate investigation that included taking certain systems offline and are working with specialists to determine the nature and scope of the event. We are working diligently to restore the functionality of our systems to minimize downtime, particularly for regulated and essential industry sectors. We apologize for any delay or inconvenience this has caused.

The investigation is ongoing, but to date we have no indication that Rand McNally customer data is affected. We will continue to update you when we have meaningful updates on the restoration of services.

We appreciate your patience and understanding and assure you we are working around the clock to restore our services. In the meantime, if you have a critical issue, we’ve established a temporary Customer Support phone number: 224-601-4847


Thank you,
Rand McNally

[NXR]

The investigation is ongoing, but to date we have no indication that Rand McNally customer data is affected. We will continue to update you when we have meaningful updates on the restoration of services.

Uh huh...

As someone who spent the last two decades protecting a large bank and a large insurance company from these events I'll translate that for you:

"We actually do not have adequate monitoring in place to even know if customer data was touched or stolen, so, no, we do not have any indication."

Soon to be followed by:

"Our ongoing investigation found that a limited amount of customer data was stolen by the attackers using sophisticated methods. We have no indication that any of the stolen information was misused."

Where "limited amount" can mean "One record less than everything." And again "no indication" means "Yeah, we're not really going to look too hard because that will get even more expensive."

Soon to be followed by the requisite apology and talking about all of the things they are now doing (as opposed to before) to protect your data.

Ray

[Ray,IN]

I agree NXR. I'm still in a free credit monitoring program from a previous security flaw at a bank.
There is no such thing as an impregnable security program, even government agencies have been broken into, although we seldom hear of those events.

[AJMike]

Originally Posted by NXR

Where "limited amount" can mean "One record less than everything."

Or even all the records because, after all, there are only a "limited amount" of records to begin with.

[Ray,IN]

I suspect RM is now in the same position Garmin was in last July. Ransomware.

REF: https://www.forbes.com/sites/barryco...h=4a07ec543164
and

https://www.bleepingcomputer.com/new...omware-attack/

[NXR]

Originally Posted by AJMike

Or even all the records because, after all, there are only a "limited amount" of records to begin with.

I love it when a large vendor writes that a "limited amount" or a "subset of our users" are affected. Some have tens of millions of users so even a limited or subset can be massively large.

OK, who thinks the message on Rand McNally's web site home page is, ummm,"misleading" or "incomplete"? ...

Pardon our disruption.

We’re upgrading our systems now and will be back up soon.


Ray

[Ray,IN]

Originally Posted by NXR

I love it when a large vendor writes that a "limited amount" or a "subset of our users" are affected. Some have tens of millions of users so even a limited or subset can be massively large.

OK, who thinks the message on Rand McNally's web site home page is, ummm,"misleading" or "incomplete"? ...

Pardon our disruption.

We’re upgrading our systems now and will be back up soon.


Ray

What would you say when your company was faced with a complete loss of the computer system, without watching your stock tank?

[Ray,IN]

Well, this might be a factor: https://www.chicagobusiness.com/tech...got-sold-again