...include an SQL injection - a fake SQL call to the database that looks real and is injected into the database or it uses surveillancecode to fish data out of the database. So companies are looking at how to make their websites secure, their identities...
http://security.cbronline.com/news/qa_with_dave_dewalt_ceo_of_mcafee