BreachExchange mailing list archives

"Massive" security breach from Latvia State Revenue Service


From: Henry Brown <hbrown () knology net>
Date: Tue, 23 Feb 2010 05:48:55 -0600

 From monstersandcritics.com  http://bit.ly/cOPhGB
...
Massive security breach suspected at Latvian tax office

Riga - The State Revenue Service (VID) in Latvia admitted Monday that 
its electronic security systems may have been breached and that millions 
of confidential documents could have been hacked.

The Latvian television news programme De Facto said Sunday night that 
120 gigabytes of data consisting of 7.4 million individual documents had 
been leaked from VID's database as a result of a data 'hole' in an 
electronic tax declaration system.

The incident represented the biggest data breach in Latvia's history and 
included information on businesses, individuals and public figures, De 
Facto claimed, and said it could vouch for the accuracy of the leaked 
data, which it said included the programme makers' tax codes and rates 
of pay.

In a statement, VID said only that there was 'a suspicion of a security 
incident involving possible data loss from the VID information system.'

The hole appeared to have been created in the system intentionally by a 
senior figure within VID, claimed representatives of a hackers' group 
calling themselves the Fourth Awakening People's Army (4ATA), which De 
Fact said obtained the information over a three-month period.

Police have opened an investigation into the incident.

...


_______________________________________________
Dataloss-discuss Mailing List (dataloss-discuss () datalossdb org)
Archived at http://seclists.org/dataloss/

Get business, compliance, IT and security staff on the same page with
CREDANT Technologies: The Shortcut Guide to Understanding Data Protection
from Four Critical Perspectives. The eBook begins with considerations
important to executives and business leaders.
http://www.credant.com/campaigns/ebook-chpt-one-web.php


Current thread: