The Massive DHS Breach Is Hacktivist Payback for Government Surveillance - CNET

https://www.cnet.com/wp-content/uploads/sites/2/GettyImages-2291317396.jpg

A Department of Homeland Security breach by an activist group has exposed the personal information of more than 41,000 employees, including Customs and Border Protection workers, Immigration and Customs Enforcement officers and others who work in government cybersecurity.

Information collected from the breach was published online in a searchable repository called Icepick on the Distributed Denial of Secrets website. According to the news leaks site, a hacktivist group called the Department of Peace breached an Okta single sign-on service used by the DHS, stealing employees’ names, contact information and assignments. The group then distributed copies of the database through the leak-hosting group DDoSecrets and to a self-described investigative journalist and cybersecurity researcher from Switzerland known as maia arson crimew, who created an online tool to search the data.

The hacktivist crimew described the leak as an “unprecedented” and “massive” exposure of the DHS’s internal structure. By detailing exact roles, chains...

Copyright of this story solely belongs to www.cnet.com. To see the full text click HERE

Read more