Hackers Steal User’s Database From European Telecommunications Standards Institute

The European Telecommunications Standards Institute (ETSI) has uncovered a data breach in which threat actors obtained a database holding a list of portal users.

The incident was disclosed last week by ETSI. It is still unclear if the attack was carried out for financial gain or if the hackers wanted to utilize the user list for espionage.

An independent, non-profit organization with headquarters in Europe is the European Telecommunications Standards Institute. 

The organization is primarily concerned with creating international standards for information and communications technology (ICT) and telecommunications, including GSM, 3G, 4G, 5G, and others.

In the quickly developing world of telecommunications and digital technologies, ETSI is essential for assuring interoperability, compatibility, and efficient communication. More than 900 organizations from 65 different countries are members of ETSI.

Document
FREE Demo

Deploy Advanced AI-Powered Email Security Solution

Implementing AI-Powered Email security solutions “Trustifi” can secure your business from today’s most dangerous email threats, such as Email Tracking, Blocking, Modifying, Phishing, Account Take Over, Business Email Compromise, Malware & Ransomware

Insights of the Breach

The French National Cybersecurity Agency (ANSSI) assisted the French-based organization in investigating this incident.

The ANSSI and the ETSI IT team worked together to investigate and fix the information systems after a cyberattack was noticed on the ETSI portal, the IT system dedicated to its members’ work.

“The vulnerability on which the attack was based has been fixed.” According to the data breach notification published by the ETSI. 

“ETSI believes the database containing the list of their online users has been exfiltrated. Since the attack and under the guidance of ANSSI experts, ETSI has fixed the vulnerability, undertaken additional security actions, and significantly strengthened its IT security procedures.”

Reports say a representative declined to comment on whether the vulnerability was known or unknown at the time of the attack.

The company has asked all of its online users to change their passwords as a precaution; however, it is unknown if user credentials were included in the stolen information.

Director-general Luis Jorge Romero called the attack a “crisis” in a statement posted on the organization’s website and applauded ANSSI for helping the organization “determine the remedial actions to be taken, and to strengthen the security of our systems.”

“Transparency is at the root of ETSI, in our governance and technical work. We are very grateful for the knowledge and advice of the experts from the French National Cybersecurity Agency (ANSSI), who have helped us to determine the remedial actions to be taken, and to strengthen the security of our systems,” ETSI Director-General said.

Hence, the French data protection authority has been notified of the data breach, and a judicial inquiry — which is essentially the investigative stage of criminal proceedings in France — is currently ongoing, according to ETSI.

Protect yourself from vulnerabilities using Patch Manager Plus to quickly patch over 850 third-party applications. Take advantage of the free trial to ensure 100% security.

Sujatha

Recent Posts

Attackers Exploit Microsoft Entra Billing Roles to Escalate Privileges in Organizational Environments

A startling discovery by BeyondTrust researchers has unveiled a critical vulnerability in Microsoft Entra ID…

22 hours ago

Threat Actors Exploit Google Apps Script to Host Phishing Sites

The Cofense Phishing Defense Center has uncovered a highly strategic phishing campaign that leverages Google…

23 hours ago

Dadsec Hacker Group Uses Tycoon2FA Infrastructure to Steal Office365 Credentials

Cybersecurity researchers from Trustwave’s Threat Intelligence Team have uncovered a large-scale phishing campaign orchestrated by…

23 hours ago

Beware: Weaponized AI Tool Installers Infect Devices with Ransomware

Cisco Talos has uncovered a series of malicious threats masquerading as legitimate AI tool installers,…

24 hours ago

Pure Crypter Uses Multiple Evasion Methods to Bypass Windows 11 24H2 Security Features

Pure Crypter, a well-known malware-as-a-service (MaaS) loader, has been recognized as a crucial tool for…

1 day ago

Attackers Exploit Microsoft Entra Billing Roles to Escalate Privileges

A recent discovery by security researchers at BeyondTrust has revealed a critical, yet by-design, security…

1 day ago