Israeli authorities investigating attack on local insurance company’s servers

guest · Dec 1, 2020

Israeli authorities investigating attack on local insurance company’s servers
Black Shadow team takes responsibility for leaking private details of the company’s Israeli clients
December 1, 2020
https://www.calcalistech.com/ctech/articles/0,7340,L-3878150,00.html

Israel’s Capital Market Authority and National Cyber Bureau have been investigating a suspected cyber attack on the website and servers of local insurance company Shirbit. Initial findings on the attack, that began on Monday, suggest that private information about some of its customers have been leaked online. The site has crashed and is currently inactive.

A group calling itself the Black Shadow team took responsibility for the hack in a tweet, describing it as a “massive attack.” The tweet featured photos of some of the leaked documents that included the addresses, names of family members, and automobile records allegedly belonging to the company’s clients.
Click to expand...

According to the Israeli authorities, the leaked information did not include credit card details, but rather identifying details about the customers of the mid-sized company that specializes in auto, real estate, and travel insurance.
Click to expand...

Data Breach event at Shirbit

Joint announcement of the Capital Market Authority and the Israel National Cyber Directorate: Data Breach event at Shirbit
Click to expand...

guest · Dec 4, 2020

BlackShadow hackers extort Israeli insurance company for $1 million
December 4, 2020
https://www.bleepingcomputer.com/ne...tort-israeli-insurance-company-for-1-million/

Threat actors are extorting an Israeli insurance company by demanding almost $1 million in bitcoin to stop leaking the company's stolen data.

On Monday, a cybercrime group calling themselves 'BlackShadow' tweeted that they hacked into the Israeli Shirbit insurance company and stole files during the attack.
Since then, the threat actors has been steadily leaking the victim's documents and images on a Telegram channel they created for this purpose. This stolen data includes documents, email PST files, scanned documents, audio recordings, and images of passports.
Click to expand...

Last last night, the threat actors finally posted a ransom demand stating that Shirbit had 24 hours to send 50 bitcoins, or approximately $1 million, and they would stop leaking their data. The attackers warned that they would continue to leak data every 24 hours if they are not paid.
At the time of this writing, the bitcoin address 13YiK3qHxTdGcD6nfCf7vWXFgWXnbpJvy2 has not received any payments.
Click to expand...

guest · Dec 5, 2020

Hackers release more private documents as Israeli insurer refuses to pay ransom
December 5, 2020
https://www.timesofisrael.com/hacke...nts-as-israeli-insurer-refuses-to-pay-ransom/

Hackers published additional sensitive client information stolen from Shirbit Insurance on Saturday, as the company continued to refuse to pay the approximately $1 million ransom demanded.

Images of private documents released included the vehicle registration and credit card details of an employee at the President’s Residence, as well as personal correspondence and a marriage certificate. The hackers say they possess a wealth of further information that will be leaked or sold if they are not paid.
Click to expand...

The group responsible for the attack, Black Shadow, had said that if the requested sum of 50 bitcoins ($950,000) was transferred into its account by Friday morning it would not publish or sell the information.
If the ransom is not paid by Sunday morning, the hackers said, they will sell the information to third parties.
Click to expand...

guest · Dec 6, 2020

Who's Behind This Week’s Massive Cyberattack – and Why Israel Should Worry
December 6. 2020
https://www.haaretz.com/israel-news...k-on-israel-and-why-it-should-worry-1.9351413

Israel’s Shirbit insurance company is still in the midst of a severe and rare cyberattack. We learned about it on December 1 from an official statement revealing a “data breach event at Shirbit” issued jointly by the Israel National Cyber Directorate and the Finance Ministry’s Capital Market, Insurance and Savings Authority, which supervises insurance companies.
Just the fact such a joint announcement was even made is highly unusual in its own right.

The hackers managed to breach Shirbit’s computer network and steal large amounts of data – hundreds of megabytes, if not much, much more – from the company’s servers.
Only two days after the attack, the hackers sent a ransom note demanding 50 bitcoins – just shy of $1 million – in return for halting publication of the stolen information online.
Click to expand...

Why is this important?
The Shirbit incident is important in two ways: First, its customers suffered. People who provided the company with their most confidential information – and Shirbit failed to protect it.

Secondly, the incident is very important from a general perspective: It reveals the inadequate level of information security of quite a number of Israeli organizations.
Shirbit is under government oversight because it is an insurance firm and one that provides services to the state.
Click to expand...

guest · Dec 13, 2020

Despite hacking fiasco, Israeli government has gone back to conducting business with Shirbit
December 13, 2020
https://www.calcalistech.com/ctech/articles/0,7340,L-3881432,00.html

The hacking attack that penetrated Shirbit’s systems hasn’t deterred the State of Israel, who stated on Sunday that it will continue to entrust Shirbit with insuring the cars’ of government employees.

After Calcalist exposed the hacking breach last week, in which hackers tried to blackmail the insurance company and leaked private details of thousands of government employees, this week the country decided to examine whether it will renew the tender with Shirbit - and notified on Wednesday that it will.
However, the Accountant General emphasized an interesting fact: employees who didn’t feel they were safe could select to go with a different insurance company.
Click to expand...

According to the announcement, “employees who have already set up their insurance plans for their vehicles for 2021 with Shirbit, are allowed to cancel their plans with no extra surcharges and to insure their vehicles with any insurance company they choose in accordance with the necessary requirements.”
Click to expand...

Log in or Sign up

Israeli authorities investigating attack on local insurance company’s servers

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

Israeli authorities investigating attack on local insurance company’s servers

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches