How are large tech sites such as LivingSocial, Zappos, LinkedIn and Evernote hacked? (i.e. how is their entire dataset of users obtained?)
LivingSocial - 50 Million Users Exposed
Zappos - 24 Million accounts accessed
LinkedIn - Over six million passwords compromised
Evernote - 50 million compromised
I don't understand how these database tables are accessed. Surely it is not SQL Injection, as that should be a thing of the past with prepared statements, I cannot see how changing any session state would effect the application as Unit Tests would have already picked this up, and I cannot imagine that hackers would easily be able to gain root access to the machines which be locked down with a SSH key.
I ask this because I manage a large database with sensitive information (FirstName, Surname, Address and DOB) and wondering how safe this data is, and how it can be made safer.