Hackers exploited poor coding practices at an Ottawa-based third-party contractor to access and eventually publish more than 20,000 usernames and passwords of Bell Canada’s small business customers on a website.

Canada’s largest phone company is being criticized for allowing the third-party contractor access to sensitive account information, which became vulnerable after IT workers introduced security holes that bypassed Bell’s own security and encryption systems. Even worse, security experts say, Bell apparently stores customer usernames and passwords in a plain text format, accessible to any hacker.

Bell has refused to comment on the security lapse or its ongoing investigation, but the hackers are talking.

“Nullcrew” claimed responsibility for the breach on Twitter, including screenshots that suggest the group used a well-known SQL (structured query language) exploit that allowed the hackers to fish for information contained in Bell’s database.

Hackers often use automated scripts to hunt sites for security exploits and often don’t know whether they will get a handful of useless data or a treasure trove like Bell’s customer records.

Trustwave Holdings, a security company based in Chicago, Ill., said in a 2013 report that poor coding practices have made the SQL injection attack a threat for more than 15 years.

“Outsourcing IT and business systems saves money only if there’s no attack,” the Trustwave report said. “Many third-party vendors leave the door open for attack, as they don’t necessarily keep client security interests top of mind.”

“Nullcrew’s” attack also discarded any pretense of encouraging clients to use passwords that are easy to remember but hard for others to guess, since Bell stored the data in an easily readable format.

Nullcrew said it alerted Bell to its security lapse more than two weeks before publishing their find online. An additional screenshot showed a Bell online customer service representative perplexed about the hacker group’s claims and likely never passed the information on to Bell’s security department.

Bell suspended the affected passwords over the weekend and is notifying customers about the security breach.

Canadian investment analysts are recommending that Canada’s telecom giant Bell (BCE) should explore buying out Bell Aliant, Inc. the largest telephone company in the Maritimes, to further consolidate Canada’s telecommunications marketplace.

Bell already effectively controls the phone company serving provinces east of Quebec through its 44 percent stake in the venture. Picking up the rest through a takeover would make financial sense, said Maher Taghi, a telecom analyst at Canada’s Desjardins Securities.

The Globe and Mail reports Yaghi explained in a note to investors a buyout would boost overall free cash flow for Bell (BCE), primarily from the increased revenue paid by customers for phone, television, and Internet service.

Bell Aliant has been one of Canada’s most conservative telecom companies serving the country’s smallest provinces in Atlantic Canada, as well as parts of rural Ontario under the NorthernTel brand and Télébec, which serves rural Quebec.

Unlike Bell (BCE), Bell Aliant has aggressively deployed fiber to the home service in New Brunswick, Prince Edward Island, and Nova Scotia to stem landline losses. Bell Aliant’s FiberOP customers avoid stingy usage caps that are pervasive across the rest of Canada. Its fiber network delivers strong competition to cable operators.

Bell (BCE) is already a major player in Canadian telecommunications, both with its landline operation and Fibe — mostly a fiber-to-the-neighborhood service — wireless phone and broadband, owner of more than two dozen specialty cable networks, a satellite TV service, owner of the CTV television network, new owner of Astral Media, and a few dozen radio stations across Canada. With this level of media concentration, Bell (BCE) would have a tough time trying to buy any additional media assets, but with its current de facto control, Bell would likely have little regulatory scrutiny merging Bell Aliant into its existing operations.

[flv]http://www.phillipdampier.com/video/Bell Aliant FiberOP Intro Video 1-2014.flv[/flv]

Bell Aliant’s FiberOP introductory video explains the network and its features for Atlantic Canada. (2:20)

Before -and- After

Hopes for increased Canadian wireless competition were dashed last week when Industry Canada released an official list of approved spectrum auction bidders mostly filled with familiar names.

Fifteen Canadian participants including market-dominant Bell, Rogers and Telus each put down a refundable 5% deposit for the Jan. 14 auction. Most of the rest of the bidders are regional providers or suspected spectrum speculators hoping to sell any acquired spectrum at a profit.

It was good news for the three largest cell companies which feared the possibility of a well-funded new entrant like Verizon Wireless. Instead of facing the deep pockets of Verizon, the three cell companies will be competing against regional providers like Quebec’s Vidéotron, Bragg Communications’ EastLink which serves Atlantic Canada, and provincial telephone companies MTS in Manitoba and SaskTel in Saskatchewan.

Two private equity firms are also participating: a subsidiary of Birch Hill Equity Partners and Catalyst Capital which holds the debt for independent Wind Mobile. Wind Mobile’s owner Globalive Communications is also registered as a participant. Both could use the airwaves in the Wind Mobile business or sell them to another provider.

“Ultimately, what would have been great is to have a well-capitalized startup, a feisty competitor coming in,” telecom analyst Troy Crandall told the Canadian Press news agency. “That would have been the best thing for consumers.”

But Canada’s best hope for lower cell phone bills was never to be found from Verizon Wireless.

“I can assure our investors that we never have and never will be leading on price,” Lowell McAdam told investors at a conference last week.

Bell’s version of price competition before the government made wireless prices and competition a priority.

After years of acute bill shock afflicting those who didn’t bother to check the breathtaking cost of using a Bell cell phone abroad, Canada’s largest phone company announced today it was cutting in half the prices it charges for mobile data, voice, and text roaming plans for customers headed to the United States.

“During the summer, Canadians told the federal government that they support wireless competition and strongly believe the wireless rules should be the same for all carriers, Canadian or international. But Canadians also told us that they want to use their smartphones a lot when they travel, and they want the price to come down,” said Bell Mobility president Wade Oosterman in a statement. “We heard you, and today Bell is cutting in half the cost of mobile roaming where Canadians travel the most: the U.S.A.”

The new, discounted rates begin Tuesday and cover the following plans:

• 30-day travel bundle: $25 (was $50) — includes 50MB of data, 50 anytime minutes in the U.S. or to Canada, unlimited incoming text messages, 200 sent text messages.
• 30-day travel add-ons: $20 each (formerly $40) — 100MB of data, or 100 minutes of voice calling, or unlimited incoming and sent texts.

Bell officials said the company is not stopping with the United States and plans further cuts in joint roaming rates in conjunction with their global telecom partners.

Some Canadians wonder what took the company so long.

“When you can just casually drop the price of something by half, I can only imagine how much profit you are actually making on it to begin with,” commented Mark Winn.

Analysts speculate Bell’s move is designed to preempt, or at least soothe “competition fever,” now rampant in the Conservative Harper government. Officials in Ottawa were reportedly disappointed that a rumored entry by Verizon Wireless into Canada never came to fruition. Opposition critics have labeled the current ‘all competition, no regulation’ government policy impotent. Some have also pointed the finger at the Canadian Radio-television and Telecommunications Commission (CRTC), Canada’s telecommunications regulator, criticized as being too cozy with incumbent market leaders.

“Viagra couldn’t grow competition in this country,” said Sally Pearson, a consumer advocate fighting to broadly open Canada’s wireless market to foreign-owned competitors. “Years of government policies that favor Bell, Rogers and Telus and flaccidity at the CRTC has given us the level of competition telecom lobbyists intended all along.”

[flv width=”640″ height=”380″]http://www.phillipdampier.com/video/CP With Verizon out whats next for Canadas wireless space 9-3-13.flv[/flv]

With Verizon out of the picture, there are no obvious candidates to take on the big three Canadian wireless providers. Canadian Press reporter Steve Rennie considers how this will impact the Harper government, its telecom policies and the telecom industry. Will Canadian consumers demand something better when Parliament returns in the fall? (2 minutes)

Executives at Canada’s largest telecom companies are sighing relief after Verizon announced it was not interested in competing in Canada.

“Verizon is not going to Canada,” Lowell McAdam, chief executive officer of New York-based Verizon, said yesterday in a phone interview with Bloomberg News. “It has nothing to do with the Vodafone deal, it has to do with our view of what kind of value we could get for shareholders. If we thought it had great value creation we would do it.”

McAdam added he thought speculation about Verizon’s plans in Canada was “way overblown.”

[flv width=”480″ height=”290″]http://www.phillipdampier.com/video/CBC Big 3 Canada telecom stocks surge as Verizon threat fades 9-3-13.flv[/flv]

The CBC reports three of the largest telecom companies in Canada are seeing their stock prices soar on news Verizon won’t enter Canada. Kevin O’Leary takes a position shared by Bell, Telus and Rogers that no spectrum should be set aside for new competitors. Instead, he seeks a “winner takes all” auction, even if it means dominant incumbent carriers monopolize every available frequency. (3 minutes)

McAdam

Verizon’s possible entry into Canada was among the hottest stories of the summer, even reported on the CBC’s national nightly news. The potential new competition provoked Bell, Rogers, and Telus — three of Canada’s largest phone and cable companies — to join forces in a multimillion dollar lobbying effort to slow Verizon down and make the wireless business in Canada less attractive. The Harper government used news of Verizon’s potential entry to promote its policies favoring competition over regulation.

Verizon Chief Financial Officer Fran Shammo said the company was considering a wireless venture in Canada at a June Wall Street investor conference.

“We’re looking at the opportunity,” Shammo said at the time. “This is just us dipping our toe in the water.”

Verizon took its toe out yesterday, despite the potential profits available in a country criticized for its extremely expensive cell phone service.

“I’m surprised that Verizon isn’t interested in Canada,” tweeted Adam Shore. “There are over 33 million suckers up here that will pay ridiculous cell phone rates.”

Bell joined Telus and Rogers in launching a multi-million dollar lobbying effort to make Verizon’s entry into Canada difficult.

The three companies most Canadians now buy wireless service from denied they wanted to keep Verizon out, arguing they simply wanted a “level playing field.”

Industry Minister James Moore suggested a fourth large player could provoke a price war in a way much smaller wireless providers like Wind Mobile or Mobilicity never could. The government was willing to set aside coveted 700MHz wireless spectrum at a forthcoming auction to help a new entrant — any new entrant — get started.

Verizon’s decision to stay out might have delivered a damaging blow to the Conservative government’s “pro-competition” solution to the problem of high cell phone bills. After the announcement, Moore was left promising only that spectrum auctions would carry on regardless of Verizon’s decision.

For now, the best chance of increased competition comes from Quebecor, which is gradually expanding its wireless network. Spectrum set asides almost guarantee the owner of Quebec’s cable giant Vidéotron will be able to bid for and win significant spectrum at the upcoming auction, some at a discount.

“If Verizon doesn’t show up, they’re actually in a very strong position to buy a block of spectrum that will not be very expensive,” Maher Yaghi, an analyst at Desjardins Securities Inc., told Bloomberg News. “Wireless is currently providing them with a nice growth platform.”

Without a surprise late entrant suddenly announcing interest by the auction filing deadline of Sept. 17, many analysts predict the outcome will likely not deliver Canadians any significant changes in cell phone service and pricing. The government may also be disappointed with the auction proceeds. Canada’s big three will likely avoid overbidding and still end up dividing most of the available airwaves between them. Quebecor may end up with most of the rest at comparatively “fire sale” prices. The Montreal-based company must then decide how much it will spend to expand its home coverage areas outside of Quebec, Toronto, and southeastern Ontario.

[flv width=”640″ height=”372″]http://www.phillipdampier.com/video/BNN Verizon Wont Enter Canada 9-3-13.flv[/flv]

BNN reports Verizon’s decision not to enter Canada leaves the Conservative government without an effective means to moderate cell phone pricing in the country. Mary Anne de Monte-Whelan, president of The Delan Group, observed the government may be forced to take a more regulatory approach to control expensive cell service, possibly starting with roaming rates.  (7 minutes)