It has been discovered by researchers at Philadelphia’s Drexel University, that credit card data on older Xbox 360 systems that have been traded in or sold on. may be vulnerable to being hacked fro the previous owners credit card information. The team has discovered that even restoring your console to factory settings won’t remove some of the data stored on the Xbox 360.
Using just a handful of common tools, almost any hacker or modders can remove the Xbox’s hard drive and recover credit card data or other personal information, which has been entered by previous owners. Speaking to gaming website Kotaku, researcher Ashley Podhradsky explained:
“Microsoft is doing a “disservice” to its customers by not doing a better job of keeping personal data protected. Microsoft does a great job of protecting their proprietary information. But they don’t do a great job of protecting the user’s data.”
Update from Microsoft:
“We are conducting a thorough investigation into the researchers’ claims. We have requested information that will allow us to investigate the console in question and have still not received the information needed to replicate the researchers’ claims.
“Xbox is not designed to store credit card data locally on the console, and as such seems unlikely credit card data was recovered by the method described. Additionally, when Microsoft refurbishes used consoles we have processes in place to wipe the local hard drives of any other user data. We can assure Xbox owners we take the privacy and security of their personal data very seriously.”
– Jim Alkove, General Manager, Security, Interactive Entertainment Business at Microsoft
Read the full article over on the Kotaku website.