Welcome home, fellow Gator.

The Gator Nation's oldest and most active insider community
Join today!

Massive Data Breach - Financial, Medical included

Discussion in 'Too Hot for Swamp Gas' started by G8trGr8t, May 31, 2025.

  1. G8trGr8t

    G8trGr8t Premium Member

    36,468
    12,719
    3,693
    Aug 26, 2008
    this isn't good

    left unencrypted for anyone to find

    Massive data breach exposes 184 million passwords from Google, Apple accounts | Fox News

    Cybersecurity researcher Jeremiah Fowler has revealed the existence of an open database that contains 184,162,718 million account credentials. These include email addresses, passwords, usernames and URLs for platforms such as Google, Microsoft, Apple, Facebook and Snapchat.

    The information also covers banking services, medical platforms and government accounts. Most shockingly, the entire dataset was left completely unsecured. There was no encryption, no authentication required and no form of access control. It was simply a plain text file sitting online for anyone to find.

    Fowler located the database during routine scanning of publicly exposed assets. What he found was staggering. The file included hundreds of millions of unique records containing user credentials linked to the world’s largest technology and communication platforms. There were also account details for financial services and official portals used by state institutions.

    The file was not protected in any way. Anyone who discovered the link could open it in a browser and instantly view sensitive personal data. No software exploit was needed. No password was asked for. It was as open as a public document.
     
    • Informative Informative x 2
  2. enviroGator

    enviroGator GC Hall of Fame

    5,592
    775
    368
    Apr 12, 2007
    Well DOGE had to store that data somehow. It is so much more efficient to just leave it unsecured.
     
    • Agree Agree x 3
    • Funny Funny x 1
    • Winner Winner x 1
  3. demosthenes

    demosthenes Premium Member

    10,249
    1,344
    3,218
    Apr 3, 2007
    Seems weird to have an aggregated file from different platforms.

    “Fowler believes the data was harvested using an infostealer. These lightweight tools are favored by cybercriminals for their ability to silently extract login credentials and other private information from compromised devices. Once stolen, the data is often sold on dark web forums or used in targeted attacks.

    After reporting the breach, the hosting provider quickly removed access to the file. However, the owner of the database remains unknown. The provider did not disclose who uploaded it or whether the database was part of a legitimate archive that was accidentally published. Fowler could not determine whether this was the result of negligence or an operation with malicious intent.”
     
  4. G8trGr8t

    G8trGr8t Premium Member

    36,468
    12,719
    3,693
    Aug 26, 2008
    what did we expect when we let a known hacker into our systems? Whoever authorized that should be brought up on criminal charges
     
    • Funny Funny x 2
    • Optimistic Optimistic x 1
  5. G8trGr8t

    G8trGr8t Premium Member

    36,468
    12,719
    3,693
    Aug 26, 2008
    could this be a sample dump as part of a bigger extortion attempt?

    white hat hacker trying to wake people up?
     
  6. sierragator

    sierragator GC Hall of Fame

    16,883
    13,432
    1,853
    Apr 8, 2007
    Biden's fault
     
    • Funny Funny x 3
    • Agree Agree x 1
  7. Gatorrick22

    Gatorrick22 GC Hall of Fame

    90,902
    27,359
    14,613
    Apr 3, 2007
    Who are you talking about?
     
  8. G8trGr8t

    G8trGr8t Premium Member

    36,468
    12,719
    3,693
    Aug 26, 2008
    doge wonderboy

    ethics--as intern he admitted to stealing info from his employer and giving it to other, moved on black web in known hacker groups, own web domains registered in Russia

    DOGE Teen Owns ‘Tesla.Sexy LLC’ and Worked at Startup That Has Hired Convicted Hackers | WIRED

    Tesla.Sexy LLC controls dozens of web domains, including at least two Russian-registered domains. One of those domains, which is still active, offers a service called Helfie, which is an AI bot for Discord servers targeting the Russian market. While the operation of a Russian website would not violate US sanctions preventing Americans doing business with Russian companies, it could potentially be a factor in a security clearance review.

    "Foreign connections, whether it's foreign contacts with friends or domain names registered in foreign countries, would be flagged by any agency during the security investigation process," Joseph Shelzi, a former US Army intelligence officer who held security clearance for a decade and managed the security clearance of other units under his command, tells WIRED.

    A longtime former US intelligence analyst, who requested anonymity to speak on sensitive topics, agrees. “There's little chance that he could have passed a background check for privileged access to government systems,” they allege.
     
    Last edited: May 31, 2025
  9. Gatorrick22

    Gatorrick22 GC Hall of Fame

    90,902
    27,359
    14,613
    Apr 3, 2007
    You're saying that the DOGE people are to blame for the data breach?
     
    • Agree Agree x 1
  10. ncargat1

    ncargat1 GC Hall of Fame

    14,924
    6,411
    3,353
    Dec 11, 2009
    Why is this so unusual (honest question, not a fight)? The Trump administration is engaging Palantir to harvest data on every American across every federal database into one massive record under the guise of efficiency. While, to the rest of us it seems like a hacker's wettest dream.

    [/The push has put a key Palantir product called Foundry into at least four federal agencies, including D.H.S. and the Health and Human Services Department. Widely adopting Foundry, which organizes and analyzes data, paves the way for Mr. Trump to easily merge information from different agencies, the government officials said.

    Creating detailed portraits of Americans based on government data is not just a pipe dream. The Trump administration has already sought access to hundreds of data points on citizens and others through government databases, including their bank account numbers, the amount of their student debt, their medical claims and any disability status.

    Mr. Trump could potentially use such information to advance his political agenda by policing immigrants and punishing critics, Democratic lawmakers and critics have said. Privacy advocates, student unions and labor rights organizations have filed lawsuits to block data access, questioning whether the government could weaponize people’s personal information]



    https://www.nytimes.com/2025/05/30/...ata-americans.html?smid=nytcore-android-share
     
  11. demosthenes

    demosthenes Premium Member

    10,249
    1,344
    3,218
    Apr 3, 2007
    Mostly due to how it was stored in an open unencrypted database. I’d assume people stealing data would not “open source” it like that.
     
  12. G8trGr8t

    G8trGr8t Premium Member

    36,468
    12,719
    3,693
    Aug 26, 2008
    likely deserves its won thread. will let someone else star tit so it doesn't get locked

    Donald Trump's reported database move sparks alarm: "Dystopian"

    Citing unnamed government officials and Palantir employees, the newspaper said the company had been in talks with various government agencies regarding the project, including the Social Security Administration (SSA) and the Department of Education.

    When approached by Newsweek for comment on the report, White House spokesperson Taylor Rogers said, without explicitly confirming the report: "President Trump signed an executive order to eliminate information silos and streamline data collection across all agencies to increase government efficiency and save hard-earned taxpayer dollars."
     
  13. G8trGr8t

    G8trGr8t Premium Member

    36,468
    12,719
    3,693
    Aug 26, 2008
    and this new federal database for them to subjectively utilize would seem to fly in the face of recent court rulings to keep the information silod

    Judge blocks OPM, Education Department from sharing personal info with DOGE - POLITICO

    A federal judge has barred the Education Department and the Office of Personnel Management — the government’s massive HR department — from sharing sensitive information with Elon Musk’s “Department of Government Efficiency,” saying the decision to grant DOGE access appears to breach federal privacy laws.

    “The continuing, unauthorized disclosure of plaintiffs’ sensitive personal information to DOGE affiliates is irreparable harm that money damages cannot rectify,” U.S. District Judge Deborah Boardman, a Maryland-based appointee of President Joe Biden, wrote Monday in a 33-page ruling granting a two-week restraining order.