🔒Ransomware Attack Exposes Data of 3,300 People
A 12-Year-Old Password Let Hackers Steal 42GB of Data
TL;DR
A ransomware attack on Ogi Networks exposed personal data of 3,300 people, mostly children, due to a weak password left unchanged for over a decade. The attack exploited a test account created in 2012.
A ransomware attack on Ogi Networks exposed personal data of 3,300 people, mostly children, due to a weak password left unchanged for over a decade. The attack exploited a test account created in 2012 with the password 'Password1', which was rated as 'very weak' and cracked in less than a second. This highlights the importance of regular password audits and updates in securing sensitive data. The attacker exfiltrated 42GB of data and encrypted 182.7GB, exploiting vulnerabilities in local administrator accounts.
Key Points
A ransomware attack on Ogi Networks exposed personal data of 3,300 people, mostly children, on November 1, 2024.
The test account was created on January 13, 2012, with the password 'Password1', rated as 'very weak'.
The password 'Password1' was cracked in less than a second, highlighting the importance of strong, updated passwords.
The attacker exfiltrated 42GB of data and encrypted 182.7GB, exploiting local administrator accounts with the same password.
The ICO reprimanded Ogi Networks Limited for failing to regularly assess and evaluate security measures.
Why It Matters
If you're managing user accounts or handling sensitive data, this attack highlights the risks of outdated security practices. Regular password audits and updates are crucial to prevent similar breaches. Ogi Networks' failure to review local administrator accounts after deployment led to this massive data exposure.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.
Join 3,569 builders reading daily.