Williams also believes the threat to be accurate. “I’ve not seen evidence of it personally but The New York Times is saying that the security company who disclosed the attacks (Hold Security, presenting at the Black Hat conference in Las Vegas this week) allowed them to independently verify things to their satisfaction.
Hold Security offers a range of services for both companies (is your website vulnerable?) and individuals (have your credentials been stolen?) so some are accusing them of self-promotion – but the overall scale of the data theft involved seems to be accurate.”