Xbox 360 retaining credit card information

According to Kotaku.com researchers at Drexel University have discovered, using common hacking tools, that modders can obtain personal information such as credit card numbers from factory restarted consoles. However in an article by Joystiq Jim Alkove, general manager of Microsoft’s security of interactive entertainment business, claims that- 

“We are conducting a thorough investigation into the researchers' claims. We have requested information that will allow us to investigate the console in question and have still not received the information needed to replicate the researchers' claims."

Xbox is not designed to store credit card data locally on the console, and as such seems unlikely credit card data was recovered by the method described. Additionally, when Microsoft refurbishes used consoles we have processes in place to wipe the local hard drives of any other user data. We can assure Xbox owners we take the privacy and security of their personal data very seriously.”

 

According to researcher Ashley L. Podhradsky, Doctor of Science in Information Systems at Drexel University and part of the team who cracked a purchased refurbished Xbox 360 console, you should use a sanitization program to wipe all information because reformatting isn’t enough.

 

Bibliography

Hinkle, David. "Microsoft Responds to Claims of Xbox 360 Hard Drives Storing Old Credit Card Info." Joystiq. 30 Mar. 2012. Web. 30 Mar. 2012. .

Schreier, Jason. "Hackers Can Steal Credit Card Information From Your Old Xbox, Experts Tell Us." Kotaku. 29 Mar. 2012. Web. 30 Mar. 2012. .