Porn Billing Leak Exposes Data of 17+ Million Buyers, iBill Denies Being Source

[mandy]

An article on Wednesday said payment service iBill was the source of a massive data leak.  On Thursday iBill denied the data came from its database:

Seventeen million customers of the online payment service iBill have had their personal information released onto the internet, where it's been bought and sold in a black market made up of fraud artists and spammers, security experts say.

The stolen data... includes names, phone numbers, addresses, e-mail addresses and internet IP addresses. Other fields in the compromised databases appear to be logins and passwords, credit-card types and purchase amounts, but credit-card numbers are not included.

The breach has broad privacy implications for the victims. Until it was brought low by legal and financial difficulties, iBill was a top credit-card processor for adult entertainment websites...

The transactions documented in the database are dated between 1998 and 2003, spanning a period at the height of iBill's success...

full article: http://www.wired.com/news/technology/0,7...wn_index_2

iBill claims it was framed and that the data isn't from its database:

Online payment company iBill on Thursday said a massive cache of stolen consumer data uncovered by security experts did not come from its database.

"I'm the first person that would have taken this to the FBI and the first person to have gone on 60 Minutes to say 'we screwed up,' if that were the case," said iBill President Gary Spaniak Jr.

Two caches of stolen data were discovered separately by two security companies while conducting routine research into malicious software online. Both had file names that purportedly linked them to iBill...

full article: http://www.wired.com/news/technology/0,7...wn_index_6