WHO, Gates Foundation Credentials Dumped Online: Report

guest · Apr 22, 2020

WHO, Gates Foundation Credentials Dumped Online: Report
NIH, CDC, World Bank Among the Other Organizations Apparently Affected
April 22, 2020
https://www.databreachtoday.com/who-gates-foundation-credentials-dumped-online-report-a-14167

About 25,000 email addresses and passwords that are apparently for staff at the World Health Organization, the Gates Foundation, the U.S. National Institutes of Health and other organizations have been dumped online, according to the Washington Post.

Credentials that appear to be for the U.S. Centers for Disease Control and Prevention, the World Bank and the Wuhan Institute of Virology in China were also dumped, the Post reports. The list was first spotted online by the SITE Intelligence Group, which says it tracks the activities of terrorist and extremists. The organization then shared the information with the Post.

It's not clear where the list came from, how it was compiled, or who posted it online. But Vice reports that it was able to verify that some of the email addresses and passwords worked. The credentials could have been obtained via previous data breaches or leaks, according to Vice.
Click to expand...

The list of email addresses and passwords appears to have been first posted on 4chan, an anonymous online forum that is popular with some far-right groups. From there, the list moved to text-storing site Pastebin as well as Twitter and a far-right channel on the messaging app Telegram, according to the Post.
Click to expand...

The Washington Post: Nearly 25,000 email addresses and passwords allegedly from NIH, WHO, Gates Foundation and others are dumped online

The NIH issued a statement Wednesday saying, “We are always working to ensure optimal cyber safety and security for NIH and take appropriate action to address threats or concerns. We do not comment on specific cybersecurity matters, as such information could be used to undertake malicious activities.”

NIH and other affected institutions declined to say whether they use multi-factor authentication, but current and former employees said that such protections had become routine within federal agencies.
WHO confirmed the incident in a statement Wednesday that cited a higher number of exposed credentials, 6,835, than had been reported by SITE.
Click to expand...

“Their password security is appalling,” Potter said of the WHO. “Forty-eight people have ‘password’ as their password.” Others, he said, had used their own first names or “changeme.”
Click to expand...

Log in or Sign up

WHO, Gates Foundation Credentials Dumped Online: Report

guest Guest

Log in or Sign up

WHO, Gates Foundation Credentials Dumped Online: Report

guest Guest

Useful Searches