Windows servers hacked at The Hartford insurance company

The company notified about 300 employees, contractors and some customers of the breach

Hackers have broken into The Hartford insurance company and installed password-stealing programs on several of the company's Windows servers.

In a warning letter sent last month to about 300 employees, contractors, and a handful of customers, the company said it discovered the infection in late February. Several servers were hit, including Citrix servers used by employees for remote access to IT systems. A copy of The Hartford's letter was posted earlier this week to the website of the Office of the New Hampshire Attorney General.

"It was a very small incident," said Debora Raymond, a company spokeswoman. The victims were mostly company employees. Less than 10 customers were affected by the malware, the W32-Qakbot Trojan, she said.

Qakbot has been around for about two years. Once installed it spreads from computer to computer in the network, taking steps to cover its tracks as it logs sensitive data and opens up back doors for the hackers to access the network.

With 28,000 employees worldwide, the 200-year-old Hartford, Connecticut, firm is one of the country's largest insurance companies.

The Hartford's letters are going out to "users who logged onto an infected server (either through a Citrix session or support purposes)" between Feb. 22 and Feb. 28, 2011, The Hartford said in its letter.

"We do know that the virus has the potential to capture confidential data such as bank account numbers, Social Security numbers, user accounts/logins, passwords, and credit card numbers," the letter states.

It's not clear how The Hartford was infected, but hackers have been targeting staffers for years now -- particularly those in IT -- with targeted e-mail attacks, trying to trick them into visiting malicious websites or downloading Trojan horse programs. Security experts say that these attacks are widespread and often methodically planned.

Despite the presence of keylogging software, the insurance company's lawyer, Debra Hampson, said that her company has "no reason to believe that any information has been or will be misused." Victims are being given two years' free credit monitoring.

Working with its antivirus vendor, The Hartford has cleaned up the infected servers and is working on locking down its systems. One of the steps, Hampson said: "Providing additional privacy and information security training for employees in order to warn them of the dangers of downloading files from unknown sources on the Internet."

Robert McMillan covers computer security and general technology breaking news for The IDG News Service. Follow Robert on Twitter at @bobmcmillan. Robert's e-mail address is robert_mcmillan@idg.com

Join the PC World newsletter!

Error: Please check your email address.

Tags securitylegaldata breachhealth careindustry verticalsThe Hartfordcybercrime

Struggling for Christmas presents this year? Check out our Christmas Gift Guide for some top tech suggestions and more.

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Robert McMillan

IDG News Service

Most Popular Reviews

Follow Us

Best Deals on GoodGearGuide

Shopping.com

Latest News Articles

Resources

GGG Evaluation Team

Kathy Cassidy

STYLISTIC Q702

First impression on unpacking the Q702 test unit was the solid feel and clean, minimalist styling.

Anthony Grifoni

STYLISTIC Q572

For work use, Microsoft Word and Excel programs pre-installed on the device are adequate for preparing short documents.

Steph Mundell

LIFEBOOK UH574

The Fujitsu LifeBook UH574 allowed for great mobility without being obnoxiously heavy or clunky. Its twelve hours of battery life did not disappoint.

Andrew Mitsi

STYLISTIC Q702

The screen was particularly good. It is bright and visible from most angles, however heat is an issue, particularly around the Windows button on the front, and on the back where the battery housing is located.

Simon Harriott

STYLISTIC Q702

My first impression after unboxing the Q702 is that it is a nice looking unit. Styling is somewhat minimalist but very effective. The tablet part, once detached, has a nice weight, and no buttons or switches are located in awkward or intrusive positions.

Latest Jobs

Shopping.com

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?