Attackers allegedly posted a number of sensitive files online after exploiting a vulnerability in the San Francisco Bay Area Rapid Transit System (BART) Police Department.
according to NBC Newsthe leaked files contained approximately 120,000 files, containing specific allegations of child abuse, the victim’s name and date of birth, and, in some cases, adult descriptions and information on suspected abuse. rice field.
The leak also reportedly includes the names and driver’s license numbers of contractors involved in the BART project, the names of various criminal suspects according to police reports, and employment documents for future officers.
The attack reportedly did not disrupt transportation system services, but safe bleach CISO Avishai Avivi raises questions about data security and privacy.
“Unfortunately, public sector organizations tend to be at higher risk of breach. The challenge of attracting cybersecurity talent, coupled with limited budgets, typically correlates with lagging cybersecurity programs.” Avivi said. Information security.
Security experts also explained that public sector organizations are unlikely to have the option to pay the ransom demanded by malicious attackers.
“Sadly, as you can see from the information already described, malicious actors have little consideration of the true victims of this compromise, the people whose information is stored in the compromised files. Hmm.
“Public sector organizations should take advantage of all free services offered by CISA and follow the recommendations they issue. Public sector organizations cannot assume they are not targeted.”
Regarding the leaked data, BART Police Chief Ed Alvarez said: Information security on mail.
“We are investigating the data posted. For clarity, no BART services or internal business systems have been affected. Like any government agency, we are taking all necessary precautions to respond. I am teaching.”
The alleged violation occurred days after Wabtec Corporation. Contents of disclosure About the data security incident last year that led to the breach of highly sensitive personal information.
