Sensitive information leaks can give cybercriminals access to bank account information, passwords, and other important data. Many companies, government agencies, and schools had to handle a dangerous situation. Learn more about this cybersecurity problem and how it can harm a business.
The National Safety Council's Role
The National Safety Council (NSC) is a non-profit organization that partners with many companies to provide workplace safety training. The NSC's website had weaknesses, making thousands of email credentials accessible through a public web directory.
Some of the impacted companies and institutions include:
- Amazon
- Verizon
- Tesla
- Pfizer
- NASA
- The U.S. Department of Justice
Researchers believe the cyber attack was caused by hackers who targeted the organization. They aimed to acquire information for malicious activities, such as phishing and credential-stuffing attacks. However, it is important to note that this is yet to be confirmed. The NCS has since fixed the issue.
Most passwords found by hackers using a weak algorithm can be cracked, estimated at around 80%. It can take up to six hours to crack a single password, depending on its strength. People may lose access to their accounts if someone else gets this private information.
The Dangers of Sensitive Information Leaks
A large-scale leak comes with monumental risks to thousands of individuals. As experts have warned, once this information falls into the wrong hands, it can be used for online scams and identity theft. These issues can have serious consequences, including:
- Phishing emails are a common way hackers trick people into sharing personal information like bank accounts or credit card numbers. They can steal someone's identity as soon as this information becomes available.
- Cybercriminals can demand money from organizations and stop them from accessing their accounts until they get paid.
- Financial loss can be serious when attackers target a company or an individual, leading to theft or demands for money. Sensitive information leaks can cause tremendous financial setbacks for the victim.
Data Protection Measures
The NSC no longer allows public web access to their client email directories. For better cybersecurity and protection of important information, companies must take matters into their own hands. Email encryption is crucial for businesses because it stops unauthorized people from reading messages.
Deploying measures such as multi-factor authentication makes it harder for hackers to access email accounts. There are small and effective methods to safeguard your business and employees from the harmful effects of cyber attacks.
Sensitive information leaks can have serious consequences. You can protect yourself and your business by following proper cybersecurity measures.
