Hackers Threaten To Publish Police Informant Data

Washington DC's Metropolitan Police Department has said its computer network has been breached in a targeted cyber-attack, US media report. The cyber criminals posted screenshots on their dark website supporting their claim to have stolen more than 250 gigabytes of data. The District of Columbia's Metropolitan Police Department said in a statement that it had asked the FBI to investigate the "unauthorised access." 

A ransomware group called Babuk is reportedly threatening to release sensitive data on police informants if it is not contacted within three days. The group warns it will start leaking information about police informants to criminal gangs if the police department doesn’t contact it within three days.

Babuk is thought to be a Russian based hacking group previously associated with breaches outside the US that has recently turned its attention to criminal ransom. Ransomware is used to scramble computer networks and steal information. Attackers target organisations with the aim to lock-down their systems and demand large sums of money in return for ending the hack. It is not clear if attackers managed to lock police out of their systems during the breach. 

Screenshots said to have been posted by the group on the dark web and shared on social media appeared to suggest it had gained access to information on criminal gang activity and police intelligence reports. 

"While we determine the full impact and continue to review activity, we have engaged the FBI to fully investigate this matter," the statement added, without providing further details of the reported breach." the Washington Police Dept. said in a statement.  

US government agencies have been targeted multiple times so far this year as a the imact of the disastrous SolarWinds breach continues. 

A worsening global epidemic of ransomware attacks is considered a national security threat by many, doing tens of billions of dollars in damage. US law enforcement is relatively powerless to counteract it as most of the criminals enjoy safe harbour in Russia and other nations with weak rule of law.

The Biden administration is attempting to improve the USA’s cyber security defenses, with an executive order expected soon. The Justice Department also recently formed a task force to help defend against ransomware attacks. By identifying ransomware as a priority, the task force will increase training and dedicate more resources to the issue, seek to improve intelligence sharing across the department, and work to identify “links between criminal actors and nation-states,” according to the memorandum.

The Verge:         CTV News:       BBC:      Wall Street Journal:     Sky:      ITPro:

You Might Also Read: 

British Police Launch CyberAlarm:

 

« Facebook And Apple Clash
Risks Of Bias In ‘Emotional AI’ »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

CSI Consulting Services

CSI Consulting Services

Get Advice From The Experts: * Training * Penetration Testing * Data Governance * GDPR Compliance. Connecting you to the best in the business.

MIRACL

MIRACL

MIRACL provides the world’s only single step Multi-Factor Authentication (MFA) which can replace passwords on 100% of mobiles, desktops or even Smart TVs.

NordLayer

NordLayer

NordLayer is an adaptive network access security solution for modern businesses — from the world’s most trusted cybersecurity brand, Nord Security. 

ZenGRC

ZenGRC

ZenGRC - the first, easy-to-use, enterprise-grade information security solution for compliance and risk management - offers businesses efficient control tracking, testing, and enforcement.

Clayden Law

Clayden Law

Clayden Law advise global businesses that buy and sell technology products and services. We are experts in information technology, data privacy and cybersecurity law.

RU-CERT

RU-CERT

RU-CERT is the CSIRT / CERT team of the Russian Federation.

CERT Polska

CERT Polska

CERT Polska is the first Polish computer emergency response team and operates within the structures of NASK (Research and Academic Computer Network) research institute.

EclecticIQ

EclecticIQ

EclecticIQ is a global provider of threat intelligence, hunting and response technology and services.

Software Factory

Software Factory

Software Factory develops custom-built high-performance software solutions and products for applications including industrial cyber security.

Silent Breach

Silent Breach

Silent Breach specializes in network security and digital asset protection. Services include Pentesting, Security Assessments, Incident Detection & Response, Governance Risk & Compliance.

StackRox

StackRox

StackRox delivers a container-native security platform that adapts detection and response to new threats.

NETRIO

NETRIO

If you are looking for a highly mature, exceptionally competent Managed Service Provider, NETRIO has solutions to keep your business running at warp speed with zero disruptions.

QuoIntelligence

QuoIntelligence

QuoIntelligence experts can help your team understand the evolving cyber threats and provide simple yet comprehensive recommendations so you can focus on what matters.

Brace168

Brace168

Specialising in Cyber Security incident identification and response, Brace168 is uniquely positioned to provide a vast experience in managed security services to meet the needs of all business types.

Fortify 24/7

Fortify 24/7

Fortify 24×7 provides a robust portfolio of managed cybersecurity solutions to help you identify and prevent attacks.

Darkscope

Darkscope

Darkscope is an award-winning personalised cyber intelligence service provider. Our cutting-edge AI and Deep Artificial Neural Networks lead the world of cyber intelligence solutions.

CyBourn

CyBourn

Cybourn's diverse offerings include engineering, analysis, product development, assessment, and advisory services in the cybersecurity space.

Turngate

Turngate

Turngate simplify security investigations so you can see employee activities and entitlements in your enterprise in seconds.

Convergence Networks

Convergence Networks

Convergence Networks is one of North America's leading Managed Services & Security Providers.

CyberMontana

CyberMontana

CyberMontana is a statewide initiative providing cybersecurity awareness, training, and workforce development for businesses and residents of Montana.

Xcede

Xcede

Xcede are global technology recruitment specialists. We connect companies with exceptional professionals who empower growth.