TechCrunch reported that a hacking group breached several websites associated with the FBI, uploading their contents to the Internet, including dozens of files containing personal data of thousands of federal agents and law enforcement officers. The hackers compromised three sites linked to the National Academy of FBI Associations, an alliance of various departments across the U.S. that promotes training and guidance for agents and police at the FBI Academy in Quantico. They exploited vulnerabilities in at least three organizational department websites and downloaded content from each web server. They then made the obtained data publicly available on their website.
The data includes approximately 4000 unique records excluding duplicates, featuring names of members, personal and government email addresses, job titles, phone numbers, and even postal addresses. TechCrunch spoke with one of the involved anonymous hackers via encrypted chat late Friday evening.
"We hacked over 1000 websites," he reported. "We are currently structuring all the data, and it will be sold soon. I believe there will be more published from the list of hacked government websites." Journalists asked if the hacker was concerned that the published files could endanger federal agents and law enforcement. "Probably, yes," he said, adding that his group has information on more than a million employees in various federal agencies and state organizations in the U.S.
It is common for data to be stolen and sold on hacker forums and marketplaces on the dark web, but in this case, the information was published for free: the hackers want to show that they have something "interesting." It has been reported that widely known vulnerabilities were used, indicating that government websites had outdated security. In the encrypted chat, the hacker also provided evidence of several other hacked websites, including a subdomain belonging to production giant Foxconn.
Source: 3dnews.ru
