Trove of Stolen Data Discovered

Web security company Finjan has alerted international banks and police after finding a huge stash of stolen business and personal data on what it's calling a "crimeserver," reports Reuters.

In operation just three weeks, the server held 1.4 gigabytes of information from 5,388 unique log files. The data included company personnel files, insurance records, Social Security numbers, medical records, login and transaction information with not only credit card and account numbers but also passwords and security codes, according to Government Computer News. It says two similar, but smaller servers have been found since.

The server was not secured, so it was accessible to anyone who could find it, though the Russian man who owned it apparently was moving it regularly between Russia, China, Hong Kong and finally Singapore, where it was shut down.

Finjan has notified more than 40 major international financial institutions in the United States, Europe and India that customers' information was compromised, as well as the FBI and law enforcement agencies around the world.

Said Yuval Ben-Itzhak, Finjan's chief technology officer:

The person that operated this server had no clue on security, he had no clue about how to configure a Web server. He just took a ... toolkit and started to use it and in three weeks he managed to have this fortune, this treasure on his server. ...The big picture is these criminals are looking for business data.