VeriSign has finally admitted that it was breached, although they don’t believe that the attacks breached the servers that support its Domain Name System (DNS) network.
In a report to the US securities and exchange commission, the company admitted that it had several successful attacks against its corporate network in which access was gained to information on their computers and servers’ in 2010, and that information stored on the compromised corporate systems was exfiltrated.
It admitted that the occurrences of the attacks were not sufficiently reported to the company’s management at the time that they occurred, for the purpose of assessing any disclosure requirements. Management was informed of the incident in September 2011.
VeriSign’s DNS processes as many as 50 billion queries daily and any information stolen from it could let hackers direct people to faked sites and intercept email from federal employees or corporate executives, though classified government data moves through more secure channels.
A spokesperson for VeriSign said that there was no comment other than what was included in the 10-Q document filed on October 28th, 2011.
Click here for more information
