The South Carolina Department of Revenue’s website was hacked. A server that houses all taxpayer information was breached, and an estimated 3.6 million social security numbers and 16,000 debit card numbers were exposed. Investigators uncovered two attempts to probe the system in early September, and later learned that a previous attempt was made in late August. In mid-September, two other intrusions occurred, and to the best of the department’s knowledge, the hacker obtained data for the first time. http://alrt.co/RATVGT
Takeaway: An IDS system with expert monitoring would have identified probing activities much sooner than when the real successful attack was carried out.