Stolen RFID cards give criminals easy access to businesses - WRBL

Stolen RFID cards give criminals easy access to businesses

Posted: Updated:
RALEIGH, N.C. -

It is easy to think the latest technology is making our lives safer, but a WNCN Investigates report will shatter that belief.

Thieves have discovered a high tech master key that can unlock electronically-secured doors and all it takes it a couple of seconds.

Security consultant Walt Augustinowicz of Identity Stronghold was able to open the electronically controlled access door at WNCN seconds after shaking reporter Steve Sbraccia's hand.

Augustinowicz did it with a cellphone-sized device housed in a protective case that made it look like a smartphone.

Inside that case are a series of inexpensive and readily available components that can steal the information from your electronic access badge within seconds.

"All I did was put it near your wallet and I soon as I saw a blink (on his device) I knew I had your card," said Augustinowicz.

That's because access cards use RFID, or radio-frequency identification technology.

The same way Augustinowicz swiped Sbraccia's card information is how he cloned it seconds later.

"All I have to do is hold my button down (on his device) and boom this is now a copy," he said pointing to a blank white card in his hand.

Those access cards are everywhere, including some of the country's best known buildings.

WNCN Investigates found someone with an access card to the Capitol in Washington D.C.Augustinowicz was able to clone it in a matter of seconds. A computer server wouldn't know the difference between the real owner of the card and the identity thief.

We took Augustinowicz to downtown Raleigh where many people walk around with company badges.

Maureen Prosser gave permission to demonstrate the easy access RFID thieves have to access cards.

As Augustinowicz swiped his device by her ID badge hanging by her side, he showed Prosser how a thief could make a copy of her access card as he stood next to her in a crowd or walked slowly by her.

Prosser then took us to her office building where Augustinowicz showed her the cloned access card worked.

"Right now, no one can get in this building," Augustinowicz told her, pulling on the locked door handle.  But he said gaining access to this building is as easy as walking by someone on the street.

"To know my identity could be manipulated that easily is a little intimidating,'' Prosser said.

There are billions of access cards posing security risks from cloning.

"You could buy the equipment inside here for $50 on line," said Augustinowicz. "Its been known for several years; just most people using the system don't know it, but hackers have all known this," he said.

In fact, access card makers like HID Global have issued best practices guides which warn people not wear badges in prominent view on the streets and to use RFID shielding devices for their access cards.

But right kind of shielding is needed.

Metal security wallets have been proven to not always work. In our tests, Augustinowicz could still read the access card through a metal wallet that touted itself as a protective device.

"It has to be designed for the card you're shielding," he said.

These same RFID access cards are also being used in several Wake County schools.

Benita Taylor also gave permission to clone her company's access card. She was with her school-aged son at the time. Taylor was worried about her son's safety at a school whose access card could be cloned.

"I would be pretty concerned,'' said Taylor. She said she hoped the schools with RFID cards would have redundant safety procedures.

"Hopefully, they will have a dual method of some kind," said Taylor.

Wake County Public Schools released a statement in response to our inquiry about cloning RIFD cards.

"It is illegal to use any device to breech our security system and then it becomes a law enforcement matter, " said school spokeswoman Renee McCoy.

In North Carolina our research showed, it is not illegal to clone access cards, but the fraudulent use of a cloned card is a crime.

Protect Yourself

The following companies offer devices at various prices that can protect your access card from RFID thieves:

Steve Sbraccia

Steve is an award-winning reporter for WNCN and former assistant professor. A seasoned professional, Steve is proud to call the Triangle home since 2005 after over two decades in Boston, Mass.  More>>

  • Trending StoriesTrending StoriesMore>>

  • 77-year-old questioned, defended as true Marine after NFL player takes his photo

    77-year-old questioned, defended as true Marine after NFL player takes his photo

    Tuesday, July 22 2014 1:58 PM EDT2014-07-22 17:58:35 GMT
    (WMC) - It was a story that made its rounds on social media. On a recent flight DeAngelo Williams, Mid-Southerner and running back for the Carolina Panthers, gave his first-class plane seat to a 77-year-old
    Family members are upset and hurt that their relative, James Wesley Bolden, is being called a liar and "a fake."
  • Durham police release video of 3 teens who left homemade bomb on bus

    Durham police release video of 3 teens who left homemade bomb on bus

    Wednesday, July 23 2014 8:03 PM EDT2014-07-24 00:03:17 GMT
    Police tape surrounds a Bull City Connector bus after a homemade chemical bomb exploded on board.Police tape surrounds a Bull City Connector bus after a homemade chemical bomb exploded on board.
    Durham police said Wednesday that three teens getting off a Bull City Connector bus left a drink bottle that exploded around 9:35 p.m. Tuesday.
    Durham police said Wednesday that three teens getting off a Bull City Connector bus left a drink bottle that exploded around 9:35 p.m. Tuesday.
  • Largest companies by revenue in each state

    Largest companies by revenue in each state

    Thursday, July 10 2014 8:01 PM EDT2014-07-11 00:01:10 GMT
    Broadview Networks recently decided to find out the biggest -- by revenue -- company in each state in the US.The company used the Fortune 500 list to start with, but needed data by state, so it turned to Hoover's.With data from that company, they were able to search through each state's list of companies and then find the largest -- by revenue.Just flip through the list above and see who is the biggest in each state, what town they are based and their revenue.
    Broadview Networks recently decided to find out the biggest -- by revenue -- company in each state in the US.The company used the Fortune 500 list to start with, but needed data by state, so it turned to Hoover's.With data from that company, they were able to search through each state's list of companies and then find the largest -- by revenue.Just flip through the list above and see who is the biggest in each state, what town they are based and their revenue.
Powered by WorldNow

1350 13th Avenue
Columbus, GA 31901

Telephone: 706.323.3333
Fax: 706.327.6655
Email: news@wrbl.com

Can't find something?
Powered by WorldNow
All content © Copyright 2000 - 2014 Media General Communications Holdings, LLC. A Media General Company.