Hacker claims breach of FBI’s critical-infrastructure portal

Dec 14, 2022, 3:04 PM | Updated: Dec 15, 2022, 8:10 am
FILE - An FBI seal is seen on a wall on Aug. 10, 2022, in Omaha, Neb. A hacker who reportedly posed...

FILE - An FBI seal is seen on a wall on Aug. 10, 2022, in Omaha, Neb. A hacker who reportedly posed as the CEO of a financial institution claims to have obtained access to the more than 80,000-member database of InfraGard, an FBI-run outreach program that shares sensitive information on national security and cybersecurity threats with public officials and private sector individuals who run U.S. critical infrastructure. (AP Photo/Charlie Neibergall, File)

(AP Photo/Charlie Neibergall, File)

BOSTON (AP) — A hacker who reportedly posed as the CEO of a financial institution claims to have obtained access to the more than 80,000-member database of InfraGard, an FBI-run outreach program that shares sensitive information on national security and cybersecurity threats with public officials and private sector actors who run U.S. critical infrastructure.

The hacker posted samples they said were from the database to an online forum popular with cybercriminals last weekend and said they were asking $50,000 for the entire database.

The hacker obtained access to InfraGard’s online portal by posing as the CEO of a financial institution, they told independent cybersecurity journalist Brian Krebs, who broke the story. They called the vetting process surprisingly lax.

The FBI declined to comment. Krebs reported that the agency told him it was aware of a potential false account and was looking into the matter.

InfraGard’s memberhip is a veritable critical infrastructure Who’s Who. It includes business leaders, IT professionals, military, state and local law enforcement and government officials involved in overseeing the safety of everything from the electrical grid and transportation, to health care, pipelines, nuclear reactors, the defense industry, dams and water plants and financial services. Founded in 1996, it is the FBI’s largest public-private partnership, with local alliances affiliated with all its field offices. It regularly shares threat advisories from the FBI and the Department of Homeland Security and serves as a behind-closed-doors social media site for select insiders.

The database has the names, affiliations and contact information for tens of thousands of InfraGard users. Krebs first reported its theft on Tuesday.

The hacker, going by the username USDoD on the BreachForums site, said on the site that records of only 47,000 of the forum’s members’ — slightly more than half — include unique emails. The hacker also posted that the data contained neither Social Security numbers nor dates of birth. Although fields existed in the database for that information, InfraGard’s security-conscious users had left them blank.

However, the hacker told Krebs that they had been messaging InfraGard members, posing as the financial institution’s CEO, to try to obtain more personal data that could be criminally weaponized.

The AP reached the hacker on the BreachForums site via private message. They would not say whether they had found a buyer for the stolen records or answer other questions. But they did say that Krebs’ article “was 100% accurate.”

The FBI did not offer an explanation for how the hacker was able to trick it into approving the InfraGard membership. Krebs reported that the hacker had included a contact email address that they controlled — as well as the CEO’s real mobile phone number — when applying for InfraGard membership in November.

Krebs quoted the hacker as saying InfraGard approved the application in early December and that they were able to use the email to receive a one-time authentication code.

Once inside, the hacker said, the database information was easy to obtain with a simple software script.

Copyright © The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.

AP

Passengers coming from China arrive at the Incheon International Airport in Incheon, South Korea, o...
Associated Press

South Korea extends restrictions on travelers from China

SEOUL, South Korea (AP) — South Korea says it will continue to restrict the entry of short-term travelers from China through the end of February over concerns that the spread of COVID-19 in that country may worsen following the Lunar New Year’s holidays. South Korea in early January stopped issuing most short-term visas at its […]
21 hours ago
FILE - In this April 4, 2017, file photo, fountains erupt along the Las Vegas Strip in Las Vegas. A...
Associated Press

Lawsuit: Vegas Strip resorts used vendor to fix hotel rates

LAS VEGAS (AP) — A federal lawsuit in Nevada is seeking class-action damages for countless hotel patrons who booked rooms in Las Vegas since 2019, alleging that most hotel-casinos on the Las Vegas Strip have used a third-party vendor to illegally fix prices. The complaint filed Wednesday in U.S. District Court in Las Vegas alleges […]
21 hours ago
Brittany Lampkin of Yazoo County, extolls the Mississippi Black Women's Roundtable legislative agen...
Associated Press

Maternal deaths and disparities increase in Mississippi

JACKSON, Miss. (AP) — Deaths from pregnancy complications have become more prevalent in Mississippi, and racial disparities in the health of those who give birth have widened in recent years, according to a report released Thursday by the state’s Department of Health. The Mississippi Maternal Mortality Report shows that the maternal mortality rate increased by […]
21 hours ago
Associated Press

Jury: $1M to Oregon woman told ‘I don’t serve Black people’

PORTLAND, Ore. (AP) — A jury has awarded an Oregon woman $1 million in damages after finding she was discriminated against by a gas station employee who told her, “I don’t serve Black people.” The Multnomah County jury’s award this week to Portland resident Rose Wakefield, 63, included punitive damages of $550,000. Wakefield’s lawyer, Gregory […]
21 hours ago
FILE - The state of Texas execution chamber in Huntsville, Texas, is pictured on May 27, 2008. A gr...
Associated Press

Texas death row inmates sue over solitary confinement

HOUSTON (AP) — A group of death row inmates filed a federal lawsuit Thursday against the Texas prison system over its policy of mandatory and indefinite solitary confinement for all prisoners who are awaiting execution, saying it causes severe physical and psychological harm. The suit alleges that the policy severely restricts their access to human […]
21 hours ago
FILE - The Hasbro logo is seen on April 26, 2018, in New York. Toymaker Hasbro said Thursday, Jan. ...
Associated Press

Toymaker Hasbro laying off 1,000 to cut costs

PAWTUCKET, R.I. (AP) — Toymaker Hasbro said Thursday it is cutting about 1,000 jobs as part of moves announced last year to save up to $300 million annually by 2025. The nearly century-old Rhode Island-based company behind Monopoly, Play-Doh and My Little Pony toys said the layoffs amount to 15% of its global full-time workforce. […]
21 hours ago

Sponsored Articles

...
Fiesta Bowl Foundation

Celebrate 50 years of Vrbo Fiesta Bowl Parade magic!

Since its first production in the early 1970s, the Vrbo Fiesta Bowl Parade presented by Lerner & Rowe has been a staple of Valley traditions, bringing family fun and excitement to downtown Phoenix.
(Photo via MLB's Arizona Fall League / Twitter)...
Arizona Fall League

Top prospects to watch at this year’s Arizona Fall League

One of the most exciting elements of the MLB offseason is the Arizona Fall League, which began its 30th season Monday.
...
Children’s Cancer Network

Children’s Cancer Network celebrates cancer-fighting superheroes, raises funds during September’s Childhood Cancer Awareness Month

Jace Hyduchak was like most other kids in his kindergarten class: He loved to play basketball, dress up like his favorite superheroes and jump as high as his pint-sized body would take him on his backyard trampoline.
Hacker claims breach of FBI’s critical-infrastructure portal