FBI InfraGard failed to vet a fake applicant and had their entire user database scraped. It’s for sale.


Title: Major Security Breach: InfraGard’s Database Compromised

In a troubling turn of events, the InfraGard program, overseen by the U.S. Federal Bureau of Investigation (FBI) to facilitate information sharing between government and private sectors regarding cyber and physical threats, has suffered a significant security breach. Recently, news emerged that the personal information of over 80,000 InfraGard members has been listed for sale on a well-known English-language cybercrime forum.

This breach raises alarm bells as it appears the hackers managed to gain access to the InfraGard database by creating a fake account that mimicked the identity of a legitimate executive within the financial sector—an identity that was apparently validated by the FBI during the vetting process. This scenario underscores a serious lapse in the vetting protocols intended to protect sensitive information.

In what is particularly unsettling, the hackers are reportedly communicating with existing members through the official InfraGard portal while posing as the vetted executive, casting further doubt on the integrity of the program’s security measures.

The ramifications of this breach are still unfolding, but it undoubtedly poses serious questions about the efficacy of current vetting processes and the overall security framework of programs designed to safeguard critical information. If you would like to dive deeper into this story, further details are available at Krebs on Security.


Share this content:

Leave a Reply

Your email address will not be published. Required fields are marked *