Monday, 21 March 2011

Information for RSA & Signify Customers












As a customer of Quantix, some of your users may be using SecurID keyfob tokens supplied by Quantix as part of your cloud service from us. These tokens are designed and manufactured by a company called RSA, the Security Division of EMC. RSA have been the market leader in two-factor authentication products for over 20 years with over 40 million tokens shipped worldwide.

We have been and are currently in regular contact with RSA as we are aware that some of RSA's systems have been subject to a sophisticated cyber attack, and that has resulted in certain information being extracted from RSA’s systems that relates to RSA’s SecurID two-factor authentication products. At this point RSA have not confirmed what this information is, but they are confident that the information extracted does not enable a successful direct attack on any of their RSA SecurID customers, including Signify and our customers.

Currently Quantix are not aware of any compromise to the security of the RSA tokens as a result of this activity, and you can be assured that we are increasing our vigilance and will be working closely with RSA to ensure we take any appropriate steps to minimise any potential impact.

RSA have released an open letter to customers relating to this incident here http://www.rsa.com/node.aspx?id=3872
We will be keeping you informed as and when more information becomes available.

No comments:

Post a Comment