Data Broker Hackers Also Compromised NW3C
Summary: The attackers behind the ssndob[dot]ms identity theft service, who also compromised servers at LexisNexis, Dun & Bradstreet and HireRight/Kroll, gained access to a public-facing VPN server at the National White Collar Crime Center (NW3C) around May 28, 2013 and held it for roughly 11 weeks until about Aug. 17, 2013. Using ColdFusion exploits patched in 2010 and January 2013 (CVE-2013-0632), they dumped local databases including authorized usernames and passwords and offloaded about 2.659 million IC3 consumer complaint records dating from May 8, 2000 to Jan. 22, 2013.
Bottom line: The organization that trains and supports cybercrime investigators, and co-runs the FBI's IC3 complaint system, was compromised by the same crew hitting the commercial data brokers - and the stolen IC3 archive covers roughly a decade of victim complaints, a ready-made target list for phishing and spam.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026