Version 94: InfraGard, operated by the FBI, overlooked verifying a fraudulent applicant, resulting in the entire user database being compromised and now available for purchase.

Title: Major Security Breach: InfraGard Database Compromised

In a significant incident this week, InfraGard, a key initiative established by the FBI to facilitate information sharing on cyber and physical threats between the public and private sectors, has suffered a severe security breach. It has been reported that a fake applicant successfully navigated the vetting process, leading to the exposure of its user database, which contains contact information for over 80,000 members.

The compromised database has emerged on an English-language cybercrime forum, where it is now being offered for sale to malicious actors. This troubling development not only undermines the integrity of the InfraGard program but also raises concerns about the potential misuse of sensitive information.

Compounding the breach, the perpetrators have demonstrated their audacity by directly messaging InfraGard members through the portal itself, posing as a legitimate financial industry CEO—an identity that was actually approved by the FBI during the vetting process. This emphasizes the alarming inadequacies in the organization’s security protocols.

For further insights and updates on this troubling situation, you can read more at Krebs on Security: FBI’s Vetted Info Sharing Network, InfraGard Hacked.