Simple Google search harvests credit card details

[Simon]

Poor website security means that criminals can harvest credit card details with nothing more exotic than a Google search, according to hosting company UKFast.

The company discovered open databases on multiple company networks that meant a well-tailored search could uncover customer details with no need to crack the network's security.

"Anyone can find this information – there is nothing you require apart from a browser and the thought on how to construct a good search," said Neil Lathwood, IT director at UKFast.

"Google is very good at indexing, so any indexable back-up files stored on the server may not be linked to from the website, but can still be found through Google and anyone - even without advanced technical skills - is able to find it."

Read more: http://www.pcpro.co.uk/news/security/368875/simple-google-search-harvests-credit-card-details

[Technical Ben]

Well, it's easy. search "4545*" or "4545************"
Not rocket science. The thing is, you will only find those who are silly enough to post a cc number.