The Mozilla Foundation has shuttered its e-commerce store after confirming a security breach at GatewayCDI, the third-party vendor that handles the store’s backend operations.
The open-source groups said it has asked Gateway CDI to quickly notify individuals who had their sensitive data compromised. Mozilla did not elaborate on the extent of compromised customer data.
Mozilla said it found out about the breach on Monday (August 4, 2009) and took the immediate preventative step of shutting down the Mozilla Store to ensure that no additional users could be compromised.
Mozilla immediately reached out to GatewayCDI and encouraged them to quickly inform individuals whose data had been compromised. GatewayCDI is currently investigating their systems and determining the cause and extent of the breach. Mozilla Store customers who are affected will be contacted directly by GatewayCDI.
Mozilla is committed to user privacy and the store will only be reinstated once we have a satisfactory assurance of ongoing login security and data privacy.
The Mozilla Store is currently displaying a “closed for maintenance” notice.
Mozilla said its international store, which is managed by a separate partner company, has also temporarily been shut down as a precautionary measure.
The Mozilla Community Store, which is separate, was not impacted.
Ryan Naraine is a journalist and social media enthusiast specializing in Internet and computer security issues.
Biography
Ryan Naraine
Ryan Naraine is a journalist and social media enthusiast specializing in Internet and computer security issues. He is currently security evangelist at
Kaspersky Lab, an anti-malware company with operations around the globe. He is taking a leadership role in developing the company's online community initiative around secure content management technologies.
Prior to joining Kaspersky Lab, Ryan was Editor-at-Large/Security at eWEEK, leading the magazine's and Web site's coverage of Internet and computer security issues and managing the popular SecurityWatch blog, covering the daily threats, vulnerabilities and IT security technologies. He also covered IT security, hacker attacks and secure content management topics for Jupiter Media's internetnetnews.com.
Ryan can be reached at naraine SHIFT 2 gmail.com. For daily updates on Ryan's activities, follow him on Twitter.
