Elance data breaches by parties unknown (but possibly Ukranian)

By Angela Gunn | Published July 17, 2009, 9:34 AM

A data breach affecting users' contact information has been uncovered at Elance, an online contractor-gig site used by many tech professionals. A notice was sent out to various registered members and reposted to a Trust & Safety page of the site on Thursday.

According to the notice, some of the information in the pilfered data table -- which includes names, phone numbers and the like but not bank information or Social Security numbers -- has turned up on an unrelated site called outsourcingroom.com.

Elance says, "We've engaged with authorities to attempt to shut down a site named Outsourcingroom.com that publically displays some of the stolen information. Recently Outsourcingroom.com went offline, but they have since reappeared and we will continue our pursuit until they stop. We are also attempting to be as forthright as possible with updates."

A WHOIS look at outsourcingroom.com -- it was up when we checked at around 8:30 am EDT, though it fell offline again a few minutes later -- indicates that it's registered to "CyberBionic Systematics," a Ukranian firm, and is apparently hosted in the UK. A few registered users so far are getting unwanted e-mail and even unwanted text messages in the wake of the breach, and Elance cautions potential victims to respond cautiously if at all to unexpected solitications.

Elance says the vulnerability that caused the trouble has been sealed, but in the next few days users may expect to hear more about the problem -- and to get notice from the site that they'll need to choose new, stronger passwords.

Comments

View comments by with a score of at least

Try spell check. UKRAINIAN.

Score: 0

|

How about instead of nitpicking typos or spelling errors that show your lack of understanding of how hard it is to write a coherent column 5 days a week and focus on the substance. I often think that those that focus on typos and spelling errors don't really have anything to say on the article.Just my opinion.

Score: -1

|

"I often think that those that focus on typos and spelling errors don't really have anything to say on the article."

Is one required to comment on every article they read?

Of course, who needs a spell-checker when you have wonderful, helpful people like us? ;) (Right, Angela?)

Score: 2

|

:-) I have a few words for people who do nothing *but* b**** about typos, but those cause spellcheck to burst into flames. (I also have few for OpenOffice's nonexistent spellcheck, but oh well.) Thanks, rtwnt and PC_Tool. This other commenter -- in the immortal words of Livia Soprano, "I don't know him." (ETA: Hey, Nate implemented cussguard! Hadn't noticed it before.)

Score: 0

|

The least you could do is correct the spelling. I'm sure it would take less time than you took writing this useless comment.

Score: 1

|

EC's Kroes to US senators: Mind your own business on Oracle + Sun

If the AP is accurate, the EU's antitrust chief just told the United States Senate that any merger that takes place in the world is more her affair than theirs.

What does AT&T's 'Mark the Spot' app say about service quality?

That's a question for Betanews readers to answer in comments to this post.

Windows fix for TLS security bug still forthcoming, won't be Tuesday

Anyone looking for a fix for last month's discovery of a potentially serious security hole in TLS and SSL may have to wait until everyone is ready to act together.

Google rolls out real-time search, Near Me Now, extended personalization

Over time, searches from PCs and mobile phones will grow even "more personalized." But what about user privacy and search results that give you "the truth"?

Betanews Podcast: Rupert Murdoch and the buying stuff online problem

We'll have a more difficult time paying for online news if the underlying protocol for online payment has a big gaping hole in it.

Not the first, not the last, technology predictions for 2010

Carmi Levy | Wide Angle Zoom: The real truth is probably that what went around in 2009, will come around to haunt us next year.

Google Goggles: Hands on with the Shazam of the Real World

Google today unveiled Goggles, its visual search lab for Android devices that identifies objects by sight.

Microsoft: Windows 7 Family Pack wasn't 'pulled,' it just sold out

If you hurry, you may still be able to find the last Family Pack upgrade editions hanging around retail store shelves, but probably not so much online.

Clever iPhone game returns after being bumped over a name dispute

The game's simple concept and multitude of platforms and puzzles manage to pull off a retro, 8-bit style that's reminiscent of an old Atari game given a modern makeover.

Intel's marriage of CPU and GPU not ready for prime time

Although there will be an Intel component this month that can compute and plot in parallel, Betanews was told today, it won't be based on Project "Larrabee."

An alternative to Research in Motion's enterprise e-mail? There's an app for that

Good Technology today released an iPhone app compatible with its enterprise e-mail solution.