Criminals loot customer data AOL

Hackers may have stolen millions of usernames and encrypted passwords from the largest Internet service provider in the United States, AOL. AOL confirms the hack and says the data is actively being misused to send spam.

AOL reports that criminals have stolen users’ email addresses, postal addresses, address books, encrypted passwords and encrypted answers to security questions. The internet company says there are no indications yet that the encryption has been cracked, but says it is signaling an increase in spam from its accounts. To send spam from an ‘innocent’ account, spoofing, access to an account is not necessary.

According to AOL, an estimated two percent of all email users at the internet company are victims of the hack. A spokesperson does not want to say to Reuters news agency exactly how many customers are involved, but it is likely that it is a large number. AOL’s mail service has tens of millions of users.

It is as yet unknown how the criminals entered the system. AOL believes someone had unauthorized access to the network where user information is stored. The company has engaged external experts to investigate. Meanwhile, the largest Internet service provider in the US is advising customers to change their passwords and security questions.