FBI InfraGard failed to vet a fake applicant and had their entire user database scraped. It’s for sale.

Major Data Breach: FBI’s InfraGard Program Exposed

In a significant security lapse, the FBI’s InfraGard program, designed to facilitate collaboration between the federal agency and private sector entities on security threats, has suffered a data breach. This incident has led to the unauthorized exposure of contact information for over 80,000 members, which is now reportedly available for sale on an English-language cybercrime forum.

InfraGard is intended to foster partnerships that enhance the sharing of information regarding cyber and physical threats, yet recent developments have raised serious concerns regarding the vetting processes used to ensure member authenticity. Remarkably, the breach occurred after hackers successfully posed as a legitimate applicant, securing access to the network. They have even gone so far as to communicate with current members through the InfraGard portal, utilizing a fraudulent identity as a CEO in the financial sector—a role that had been approved by the FBI.

The implications of such a breach extend beyond mere data loss; they signify vulnerabilities in the systems established for safeguarding sensitive information. As this situation unfolds, it raises critical questions about the protocols in place that are intended to protect both federal and private sector interests.

For a more in-depth look at the breach and its implications, you can read the full report on Krebs on Security.

Share this content:

Leave a Reply

Your email address will not be published. Required fields are marked *