UK Ministry of Defense MoD passwords leaked on Dark Web

The United Kingdom’s Ministry of Defense (MoD) has recently made headlines after it was revealed that over 560 staff members’ passwords were exposed on the dark web, triggering widespread concern within Parliament.

The breach is believed to be the work of hackers, possibly linked to Russian military intelligence, who are known for targeting foreign government networks. Sources familiar with the situation suggest that the hack may have compromised sensitive information, including military and civilian data, as well as that of defense contractors. The leaked information reportedly includes login credentials, email addresses tied to the Defense Gateway portalā€”a platform used by the British military to exchange classified data.

An anonymous source on Telegram indicated that the attack likely occurred in September, but the details have only recently surfaced. This source also mentioned that the breach includes classified data such as human resources information, personnel salaries, and medical records for military personnel and their families stationed in regions like Iraq, Cyprus, Mainland Europe, and Qatar. Additionally, some research and development communications shared over the internal network are believed to have been exposed.

The leak of such sensitive credentials could open the door to threats like phishing, blackmail, and further cyberattacks by state-sponsored actors. These could involve infiltrating networks with surveillance tools or malware, disrupting operations and compromising security.

According to reports from Cybersecurity Insiders, while the hackers have obtained the passwords, there is no evidence yet that they have used them to access the network. Fortunately, incident response teams have acted quickly to mitigate the damage, resetting passwords and implementing necessary security measures to protect the network.

The MoD has acknowledged the breach and confirmed it is working alongside the National Cyber Security Centre (NCSC), the cyber division of Britain’s GCHQ, to investigate the incident thoroughly.

Ad
Naveen Goud
Naveen Goud is a writer at Cybersecurity Insiders covering topics such as Mergers & Acquisitions, Startups, Cyber Attacks, Cloud Security and Mobile Security

No posts to display