Hackers Gaining Power of Subpoena Via Fake “Emergency Data Requests”
Summary: Hackers are compromising police department email accounts and websites to send fake Emergency Data Requests (EDRs), which bypass court-ordered warrants and require no court-approved documents, to harvest subscriber data from ISPs, phone companies and social media firms. Krebs on Security reports that a 14-year-old UK founder of the Recursion Team advertised a warrant/subpoena service on the cracked[.]to forum at $100 to $250 per request, and that Discord complied with a fraudulent EDR targeting an 18-year-old from Indiana within 30 minutes to an hour.
Key Takeaway: There are roughly 18,000 police jurisdictions in the United States alone, and all a hacker needs is illicit access to a single police email account to turn a life-or-death attestation into a data breach at your provider.
Read the original at Krebs on Security ↗
- Topics
- Cybercrime & Law Enforcement
- Related
- Gootloader Malware Disrupted After Infecting 25,000 Computers Cyber Risks · Nov 13, 2026354 dark web vendors and buyers arrested in Operation Tor Nado Cyber Risks · Nov 13, 2026Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure Cyber Risks · Nov 13, 2026