DEA Investigating Breach of Law Enforcement Data Portal
Summary: The DEA says it is investigating reports that hackers obtained a username and password for an authorized user of esp.usdoj.gov, the Law Enforcement Inquiry and Alerts (LEIA) system, which provides federated search of 16 federal law enforcement databases. The alleged access was shared with KrebsOnSecurity by the administrator of the Doxbin, and the hacker reportedly logged in with stolen credentials alone, with no prompt for a second authentication factor.
What's compelling: Researcher Nicholas Weaver said the access could let intruders not only view sensitive records but submit false records to law enforcement databases, and that cartels would pay heavily for it because they could search for their enemies rather than themselves. The portal sits within a Justice Department data inventory listing 3,330 results, so the exposure is unlikely to be confined to this one system.
Read the original at Krebs on Security ↗
- Topics
- Cybercrime & Law Enforcement
- Related
- Gootloader Malware Disrupted After Infecting 25,000 Computers Cyber Risks · Nov 13, 2026354 dark web vendors and buyers arrested in Operation Tor Nado Cyber Risks · Nov 13, 2026Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure Cyber Risks · Nov 13, 2026