NCIX Database Servers Sold at Auction Without Being Wiped

[BackSapper]

NCIX Database Servers Sold at Auction Without Being Wiped | eTek..

Canadian retailer NCIX filed for bankruptcy and closed 10 months ago. They were the premiere PC hardware retail store in Canada and even did a sizable business on the other side of the border. However, as Travis Doering of Privacy Fly found out, the company did not go quietly away without doing some damage to their customer’s security first.
Doering recounts meeting up with a Craigslist seller claiming to have NCIX’ Database servers for only $1500 CAD. This includes a Database Server from NCIX and a Database Reporting Server, allegedly legally obtained via Able Auctions. Prior to NCIX shutting down, their assets were sold off through this company.

[chipsnapper]

How the fuck do you mess up this bad? Also who do you sue if your shit gets leaked through this?

[Natrox]

I assume the auctioneers. They would be responsible for wiping the computers.

[meppers]

An exploration on how these kinds of bankruptcy auctions work

https://youtu.be/29LL3blOxds

https://youtu.be/cDZfh5IjGv8

[BackSapper]

Privacy Fly | NCIX DATABREACH

It's even worse then the first linked article states.

[elix]

Good thing they went bankrupt, storing CC details in plaintext is totally against every single card processors' policies and is incredibly shit security.

In fact who's to say that they weren't compromised while they were still in operation and taking orders?

[Miya]

https://i.imgur.com/5f4GDwY.jpg

[Nomad]

https://twitter.com/StephenPunwasi/status/1042870916126978048?s=19

Why on earth is the police not seizing the drives?

[jordguitar]

Some idiot probably only listened to half of what was said (the fact that it was bought at a bankruptcy sale) and made the conclusion that there is no crime.

[ASparkle]

Selling some amounts of customer records is fairly common practice, but nothing anywhere near like this.

[Grocel]

In Europe the GDPR would have raped you for this.

[Jelman]

technically if any of the customer records are for Europeans they can rape you anyway even if you're a Canadian business

[proboardslol]

If you do business in the EU yeah but if not then the EU has no jurisdiction over you if you're Canadian

[Megalan]

Typical gambling. Most people are carried away and realize what they have done after they have spend $$$ on some stupid shit worth 5$.

[Grocel]

A bit like real life loot boxes...