黑客组织ExfilSquad对英国教育部和警察数据库发动网络攻击，窃取超过74万条数据1。其中约60万条数据来自教育部帮助台门户网站，包含政府官员、学校领导、大学员工和警察的个人信息1；另有13.5万条数据来自英国警察国家法律数据库1。
教育部随后发布声明称已"采取迅速行动遏制事件"，并表示"涉及的信息仅限于客户服务联系方式"1。然而知情人士对此提出安全隐患，指出"风险程度低。问题是，如果你用PNLD密码，是否会在更敏感的系统中使用它？"1
黑客团伙要求支付未指定金额的赎金，否则将上传全部窃取数据1。黑客在勒索信中声称"你要求的报酬与你数据泄露的诉讼成本相比只是个舍入误差。聪明点，直接付钱"1。
A cybercriminal group known as ExfilSquad has breached databases belonging to the UK Department for Education and police, compromising over 740,000 records in total 1. Approximately 600,000 of these records were stolen from the Department for Education's helpdesk portal, containing personal information of government officials, school leaders, university staff, and police officers 1. An additional 135,000 records were taken from the National Law Database used by UK police forces 1.
The Department for Education stated that it had "taken swift action to contain the incident," asserting that "the information involved was limited to customer service contact details" 1. However, an insider cautioned about potential risks, stating: "The risk level is low. The question is, if you use PNLD passwords, are you using them on more sensitive systems?" 1
The attackers have demanded an unspecified ransom, threatening to upload all stolen data if payment is not made 1. In their message to the targeted organizations, the hackers stated: "The compensation you are asking for is just a rounding error compared to the litigation costs of your data breach. Be smart, pay now" 1.
评论
还没有评论，欢迎留下第一条。