| Recurring |
one_organization, multiple_organization |
(a) The software failure incident having happened again at one_organization:
The incident at software service provider [24]7.ai resulted in unauthorized access to customer payment information of companies like Delta Air Lines and Sears Holding Corp. This incident occurred on or after Sept. 26, 2017, and was discovered and resolved on Oct. 12 of the same year [70978].
(b) The software failure incident having happened again at multiple_organization:
The cyber security breach at [24]7.ai affected online customer payment information of various clients, including Delta, Sears, and Kmart among other companies. This indicates that the software failure incident impacted multiple organizations that were clients of the service provider [70978]. |
| Phase (Design/Operation) |
design |
(a) The software failure incident in the articles was related to the design phase. The incident occurred at software service provider [24]7.ai, affecting online customer payment information of clients like Delta Air Lines and Sears Holding Corp. The cyber security breach was a result of unauthorized access to credit card information, impacting under 100,000 customers. The incident was discovered and resolved by [24]7.ai, indicating a failure introduced during the system development or updates [70978].
(b) The articles do not provide information indicating a software failure incident related to the operation phase. |
| Boundary (Internal/External) |
within_system |
(a) The software failure incident in this case was within_system. The incident occurred at the software service provider [24]7.ai, which provides online support services for companies like Delta Air Lines and Sears Holding Corp. The cyber security breach that led to unauthorized access to customer payment information was a result of a failure within the system of [24]7.ai [70978]. |
| Nature (Human/Non-human) |
non-human_actions |
(a) The software failure incident in this case was due to non-human actions, specifically a cyber security breach at the software service provider [24]7.ai. The incident led to unauthorized access to customer payment information of companies like Sears and Delta Air Lines. The breach occurred on or after Sept. 26, 2017, and was resolved on Oct. 12 by the technology firm [24]7.ai [70978].
(b) There is no specific mention in the article about the software failure incident being caused by human actions. |
| Dimension (Hardware/Software) |
software |
(a) The software failure incident reported in Article 70978 was not attributed to hardware issues. The incident was a cyber security breach at software service provider [24]7.ai, which led to unauthorized access to customer payment information of companies like Sears and Delta Air Lines. The breach was related to online customer payment information and was resolved by the software service provider [24]7.ai [70978].
(b) The software failure incident in Article 70978 was directly related to software issues. The cyber security breach occurred at the software service provider [24]7.ai, indicating that the failure originated in the software systems provided by [24]7.ai. The incident involved unauthorized access to customer payment information, highlighting a software vulnerability that was exploited by cyber attackers [70978]. |
| Objective (Malicious/Non-malicious) |
malicious |
(a) The software failure incident in this case was malicious, as it was a cyber security breach at software service provider [24]7.ai that led to unauthorized access to customer payment information of companies like Sears and Delta Air Lines [70978]. |
| Intent (Poor/Accidental Decisions) |
poor_decisions |
(a) The software failure incident involving Sears Holding Corp and Delta Air Lines Inc was due to a cyber security breach at software service provider [24]7.ai. The incident led to unauthorized access to customer payment information, affecting under 100,000 customers. This breach was a result of poor decisions or inadequate security measures that allowed the cyber attack to occur [70978]. |
| Capability (Incompetence/Accidental) |
accidental |
(a) The software failure incident reported in the article was not attributed to development incompetence. The incident was a cyber security breach at software service provider [24]7.ai, affecting online customer payment information of clients like Delta Air Lines and Sears Holding Corp. The breach was discovered and resolved by the company [24]7.ai, indicating that the failure was not due to development incompetence [70978].
(b) The software failure incident was accidental in nature, as it was a cyber security breach that occurred on or after Sept. 26, 2017, and was discovered and resolved by the software service provider [24]7.ai on Oct. 12. The breach led to unauthorized access to credit card information of under 100,000 customers of Sears Holding Corp. and potentially exposed a small subset of Delta Air Lines customers, although it was uncertain if their information was accessed and compromised. The incident was not intentional but rather a result of a cyber security breach [70978]. |
| Duration |
temporary |
The software failure incident related to the cyber security breach at software service provider [24]7.ai was temporary. The incident occurred on or after September 26, 2017, and was discovered and resolved by October 12 of the same year [70978]. |
| Behaviour |
omission, timing, value, other |
(a) crash: The software failure incident in the article is not described as a crash where the system loses state and does not perform any of its intended functions [70978].
(b) omission: The incident led to unauthorized access to the credit card information of under 100,000 Sears customers, indicating an omission in protecting customer payment information [70978].
(c) timing: The cyber security incident affecting online customer payment information occurred on or after Sept. 26, 2017, and was resolved on Oct. 12, indicating a timing issue in the system's response to the breach [70978].
(d) value: The incident resulted in the exposure of customer payment information, indicating a value-related failure where the system performed its intended functions incorrectly by allowing unauthorized access to sensitive data [70978].
(e) byzantine: The article does not mention any inconsistent responses or interactions by the system that would classify the failure as a byzantine behavior [70978].
(f) other: The other behavior observed in this software failure incident is a security breach caused by a cyber attack on the software service provider [24]7.ai, leading to unauthorized access to customer payment information [70978]. |