Wind River Security Incident Affects SSNs, Passport Numbers

[silversurfer]

Wind River Systems, which develops embedded system software, on Friday warned of a “security incident” that had exposed personnel records.
 
One or more files were downloaded from the company’s network on or around September 29, it said. Affected data included information maintained within the company’s personnel records – including critical data like Social-Security numbers, driver’s license numbers and passport numbers.
 
“We have been working with law enforcement and outside experts to investigate a security incident that occurred toward the end of September,” according to the security-incident notice, filed with California’s Attorney General as part of the state’s data-breach notification requirements. “We have no indication that any information in these files has been misused.”
 
Alameda, Calif.-based Wind River develops software for embedded systems, such as Wind River Linux, its embedded Linux development platform. Embedded systems are microprocessor units on a chip that serve a dedicated function within a larger system.
 
The company is also known for industry-specific software offerings for the aerospace and defense, industrial and automotive fields, for instance.
 
Wind River said that the full scope of information affected includes dates of birth, SSNs, social insurance, driver’s license or national identification numbers, passport or visa numbers, health information or financial account information. It’s not stated which specific health information is affected. If accessed this type of data can provide cybercriminals the tools that they need for identity-theft attacks, phishing scams and more.

Read more: https://threatpost.com/wind-river-securi...rs/163550/