Recently, a security vulnerability, commonly known as “shellshock,” was uncovered in the “bash” shell installed in many UNIX-based systems, including Linux and OSX. Systems with unpatched version of bash can be vulnerable, particularly if they are configured as webservers using a mechanism called “CGI,” which can run programming that in turn calls the bash shell in the background that this bug exposes to rogue commands. Electra's webservers have never been deployed with this configuration, thus are not vulnerable.
We take the responsibility of keeping your information protected very seriously at Electra Information Systems.
We would like to assure you that with regards to the shellshock bug:
1) Your account is secure
2) Your account details were not exposed in the past and will remain secure
3) You do not need to take any additional action to safeguard your information
4) There is no need to change your password
5) We have scanned our servers and found none of them to be compromised
6) All servers have been patched to avoid other potential exploits of this bug
While we always advise our clients to be cautious and aware of the security of their personal information; in this case we want to reassure you that there is no need to be unduly concerned. Your login user name, password details and account data have not been exposed through the shellshock vulnerability. While Electra does use webservers, we have not been affected by the “shellshock” bug.