Eskom data leak exposes sensitive customer information – Security researcher

guest · Feb 6, 2019

Eskom data leak exposes sensitive customer information – Security researcher
February 6, 2019
https://mybroadband.co.za/news/ener...customer-information-security-researcher.html

Security researcher Devin Stokes has disclosed a vulnerability in Eskom’s information systems that is leaking customer data.

Stokes said that he took the decision to go public after Eskom failed to respond to several disclosure emails, emails from news organisations, and direct messages on Twitter.
He said that the leak has been going on for weeks.
Malware installation
News that an Eskom customer databases is leaking sensitive data comes after a security researcher from the MalwareMustDie security research work group reported that an Eskom employee downloaded a trojan onto her computer.

According to the researcher, the employee downloaded a fake Sims 4 installer – which resulted in her company credentials being compromised.
Click to expand...

guest · Mar 1, 2019

Eskom customer data leak – What really happened
March 1, 2019
https://mybroadband.co.za/news/security/297690-eskom-customer-data-leak-what-really-happened.html

Eskom denied responsibility for the leak, however, stating that it had traced the origins of the problem to an exposed Mongo database hosted on a server in the United States.
Following Eskom’s response, a company called EMS Invirotel took responsibility for the leak.

In a statement published online, which EMS Invirotel has confirmed is authentic, the company confirmed that a database with certain customer information was accessed by an unauthorised third party.
“The security employed on the server was far more advanced than that which is required by the minimum standards, and was regularly updated with the latest security patches,” the company said.

Queried about this, EMS Invirotel told MyBroadband that a hacking attempt resulted in a particular database being published on an unsecured port, causing it to be publicly accessible.
The “attempted hacking” also caused them to be unable to secure the database after the intrusion was detected, the company said.
Click to expand...

Log in or Sign up

Eskom data leak exposes sensitive customer information – Security researcher

guest Guest

guest Guest

Log in or Sign up

Eskom data leak exposes sensitive customer information – Security researcher

guest Guest

guest Guest

Useful Searches