◆ SpookStack

TELHERTT. e 02/26/2002 01:11 PM To: ce: Subject: Reporter call re: alleged security breach w/NYT Co. intranet i received a call trom[ reporter with Security Focus, an online publication. {www.securityfocus.com Leia he was contacted by a hacker of "known reliability" who said he was able to gain access to The New York Times Company's intranet (and extranet, it seems). According to the reporter, this hacker-said he was able to download the social security numbers of all Times employees, as well as personal files/info on 3,000 op-ed contributors. He also accessed credit card information for home delivery subscribers. He said he was able to get thru via an open proxy server. Please give me a call to let me know 1) if this is possible 2) if we can track access records to see if in fact our files were accessed by this person and 3) how we'd like to respond. The reporter's on deadiine for today and has asked us to comment. Supposedly this is a "friendly" hacker who in the past has alerted companies to these types of security issues and helped resolve them (not as a paid consultant but te be "helpful" according to the reporter}. thanks! b6 -2 bic -2 PR The New York Times — ” FBI(19-cv-1495)-92