From the course: Web Security: User Authentication and Access Control

Unlock the full course today

Join today to access over 24,700 courses taught by industry experts.

Password theft and reuse

Password theft and reuse

- [Instructor] In this movie, we will discuss password theft and password reuse. In 2013, Target, a popular US retail store had a data breach. Hackers stole credentials from one of Target's third party contractors, and then they used those credentials to harvest data from 41 million credit cards, as unsuspecting customers ran their credit cards at the checkout counter. Target's losses were estimated at $500 million. Plus, Target settled a multi-state lawsuit for another 18.5 million, and it all began with one set of credentials. Credential theft is a big deal and its widespread. The CBS news program "60 Minutes" found that 80% of security breaches were caused by either weak or stolen passwords. Hackers prefer credentials 'cause they grant access, and they also give the appearance of a legitimate user. It leaves less evidence behind, doesn't trigger alerts, and that lowers the chance of discovery. Credentials also…

Contents