Current Events > Argentina got hacked. Entire country's data.

(+) Yeah! (+)

https://www.zdnet.com/google-amp/article/twitter-suspends-hacker-who-stole-data-of-46-million-argentinians/

Twitter has suspended a hacker who allegedly stole all of the data from Argentina's database holding the IDs and information of all 45 million citizens of the country.
A threat actor using the handle @aniballeaks said they managed to hack into Argentina's National Registry of Persons -- also known as RENAPER or Registro Nacional de las Personas -- and offered to sell the data on a cybercriminal forum.
The leaked data includes names, home addresses, birthdays, Trmite numbers, citizen numbers, government photo IDs, labor identification codes, ID card issuance and expiration dates.
Initially, the hacker began leaking the information of famous Argentines like Lionel Messi and Sergio Aguero. But in a conversation with The Record, the hacker said they planned to publish the information of "1 million or 2 million people" while looking for buyers interested in the data.
The hacker also tacitly confirmed how they managed to break into the National Registry of Persons, noting that it was "careless employees" that allowed them into the system.
The government of Argentina released a statement on October 13 denying that the National Registry of Persons had been hacked. But the statement also says that a VPN from someone within the Ministry of Health had been used to access the Digital Identity System right before the Twitter account leaked the initial data on the high-profile Argentines.
Tony Pepper, CEO of cybersecurity firm Egress, called the hack "monumental."
"The black market for stolen data is big business, and cybercriminals will stop at nothing to find their next big payday. This attack should be a warning to governments: cybercriminals have the means to execute large-scale, sophisticated attacks, and their citizens' data is under threat," Pepper said.
"With the data of millions at risk, Argentinian citizens are now prime targets for follow-up attacks, such as financial fraud, sophisticated phishing attempts and impersonation scams, aimed at stealing further personal data, identities and even their money."

That's impressive, ngl

---

remember when all of the SSNs leaked online.

and nothing was done

---

The whole Argentina!?

---

Argentina the fake Europeans of Latina America

---

SocialistGamer posted...

The whole Argentina!?

The whole Argentina

---

That's kinda boss, ngl.

---

How the hell does an entire country get hacked? You can't hack the beach.

You wouldn't download a country.

---

Underfund IT, treat them as a cost center, ignore their recommendations. Get your entire country hacked. Shocked pikachu face

wackyteen posted...

This attack should be a warning to governments: cybercriminals have the means to execute large-scale, sophisticated attacks, and their citizens' data is under threat," Pepper said.

Honestly it sounds like a classic social engineering, "Hey I'm pushing updates to the database on the backend, can you give me access so I can make sure it's displaying the changes properly on your end?" kinda tactic -_-

---

wackyteen posted...

A threat actor

What is this?

---

---

KogaSteelfang posted...

What is this?

It is a person, group, organization or government that perpetrates or exploits an act or event that threatens the safety or welfare of the target.

---

_BlueMonk posted...

remember when all of the SSNs leaked online.

and nothing was done

---

Before that there was also that big OPM breach of federal employees' full biographical data... the government's response was to offer free access to a broken identity protection service whose security questions were all things that would have been breached to begin with lmao.

---

Hexenherz posted...

It is a person, group, organization or government that perpetrates or exploits an act or event that threatens the safety or welfare of the target.

Thanks. Guess I just don't get why it's a "threat actor" and not just a threat. Oh well.

---

Joeydollaz posted...

Argentina the fake Europeans of Latina America

LMAO! Remember when they wanted to go to war with Britain?

---

KogaSteelfang posted...

Thanks. Guess I just don't get why it's a "threat actor" and not just a threat. Oh well.

Probably to impart a very precise meaning, to differentiate it from a general threat that could be caused by like severe climate change or infrastructure collapse or something.

---

Already happened to Brazil tbh

---

_BlueMonk posted...

remember when all of the SSNs leaked online.

and nothing was done

SSN is legit less secure then a fucking library card.

---

Imagine if this happened with nuclear launch codes
---