Ubiquiti: Change Your Password, Enable 2FA

ronjor · Jan 11, 2021

11 Jan 2020
Ubiquiti, a major vendor of cloud-enabled Internet of Things (IoT) devices such as routers, network video recorders, security cameras and access control systems, is urging customers to change their passwords and enable multi-factor authentication. The company says an incident at a third-party cloud provider may have exposed customer account information and credentials used to remotely manage Ubiquiti gear.
Click to expand...

https://krebsonsecurity.com/2021/01/ubiquiti-change-your-password-enable-2fa/

hawki · Mar 30, 2021

"Whistleblower: Ubiquiti Breach “Catastrophic”

On Jan. 11, Ubiquiti Inc. [NYSE:UI] — a major vendor of cloud-enabled Internet of Things (IoT) devices such as routers, network video recorders and security cameras — disclosed that a breach involving a third-party cloud provider had exposed customer account credentials. Now a source who participated in the response to that breach alleges Ubiquiti massively downplayed a “catastrophic” incident to minimize the hit to its stock price, and that the third-party cloud provider claim was a fabrication..."

https://krebsonsecurity.com/2021/03/whistleblower-ubiquiti-breach-catastrophic/

guest · Dec 6, 2021

Ubiquiti hack may have been an inside job, federal charges suggest
The DOJ alleges a former employee stole data and tried to extort the company
December 1, 2021

An indictment from the Department of Justice suggests that the Ubiquiti hack reported in January, and subsequent whistleblower claims of a cover-up, were the work of someone who was then an employee of the company. The DOJ alleges that Nickolas Sharp, 36, was arrested on Wednesday on accusations that he used his employee credentials to download confidential data and sent anonymous demands to the company he worked for pretending to be a hacker in an attempt to get a ransom of 50 Bitcoin. You can read the full indictment below.
Click to expand...

DoJ: Former Employee Of Technology Company Charged With Stealing Confidential Data And Extorting Company For Ransom While Posing As Anonymous Attacker

Damian Williams, the United States Attorney for the Southern District of New York, and Michael J. Driscoll, Assistant Director-in-Charge of the New York Office of the Federal Bureau of Investigation (“FBI”), announced the arrest today of NICKOLAS SHARP for secretly stealing gigabytes of confidential files from a New York-based technology company where he was employed (“Company‑1”), and then, while purportedly working to remediate the security breach, extorting the company for nearly $2 million for the return of the files and the identification of a remaining purported vulnerability.
Click to expand...

plat · May 10, 2023

https://www.justice.gov/usao-sdny/p...tenced-six-years-prison-stealing-confidential

Sharp reportedly gets 6 year prison sentence.
Twitter source

In December 2020, SHARP secretly stole gigabytes of Company-1’s data. While purportedly working to remediate the security breach he created, SHARP extorted the company, as an anonymous hacker, for nearly $2 million for the return of the files and the identification of a remaining purported vulnerability. SHARP subsequently re-victimized his employer by causing the publication of misleading news articles as a purported anonymous whistleblower about the company’s handling of the breach that he perpetrated, which were followed by the loss of over $4 billion in Company-1’s market capitalization.
Click to expand...

Log in or Sign up

Ubiquiti: Change Your Password, Enable 2FA

ronjor Global Moderator

hawki Registered Member

guest Guest

plat Registered Member

Log in or Sign up

Ubiquiti: Change Your Password, Enable 2FA

ronjor Global Moderator

hawki Registered Member

guest Guest

plat Registered Member

Useful Searches