Bell Canada website hacked with POST-based SQL Injection vulnerability
Bell Canada confirmed Sunday that usernames and passwords of 22,421 and five legitimate credit score card figures have been leaked by hackers. Having said that, the business points finger at 3rd-celebration stating the leak “benefits from illegal hacking of an Ottawa-based mostly third-social gathering supplier’s data technologies technique”.
Bell claims its possess network was not affected by this breach. Bell has disabled all passwords and notifying all affected customers. They are presently functioning with legislation enforcement and government safety officials to look into the subject.
“Fairly a laughable assert, Bell basically appreciates of the breach, they realized the susceptible portion of the internet site for two months.”In a reaction to the Bell’s declare, hackers stated in their twitter account.
The screenshot delivered to DataBreaches reveals that the hackers had a chat with Bell Aid group.
| Nullcrew chatting with Bell help staff |
Hackers said a Put up based mostly SQL Injection vulnerability resides in the password recovery web page of Bell’s sub-area( https://protectionmanagement.bell.ca/passwordrecovery_1.asp)
 |
| Write-up-primarily based SQL Injection in Bell Canada |
