Hackers Breach FBI-Affiliated Sites, Expose Data of Thousands of Officers
A hacker group breaches FBI National Academy Association websites and exposes the personal information of thousands of law enforcement officers. The perpetrators plan to sell a much larger cache of stolen federal data.
A hacker group breaches several websites affiliated with the FBI National Academy Association (FBINAA) and exposes the personal information of thousands of federal agents and law enforcement officers. The attackers exploit security flaws on at least three chapter websites to download the contents of their web servers. They then upload the stolen files to their own site, which contains approximately 4,000 unique records featuring names, email addresses, job titles, phone numbers, and postal addresses.
The FBINAA states that it works with federal authorities to investigate the breach and identify the affected chapters. One of the hackers speaks to reporters through an encrypted chat and claims to have breached more than 1,000 sites in total. The hacker acknowledges that releasing this sensitive information likely puts federal agents and law enforcement personnel at risk.
The hackers claim to hold over a million records on employees across several U.S. federal agencies and public service organizations. Although stolen data frequently sells on dark web marketplaces, this group initially offers the law enforcement data for free to demonstrate the value of their haul. The attackers plan to structure and sell the remaining stolen government data soon, highlighting a significant and ongoing security threat.