Thursday

14th Dec 2017

Hackers dump EU staff passwords and credit card details onto net

A number of people working for the EU institutions have had their emails, passwords and credit card details hacked and released to the general public over the Christmas break.

A partial list was recently published online by Anonymous, a loose network of cyber activists campaigning against the so-called 'New World Order'.

Thank you for reading EUobserver!

Subscribe now for a 30 day free trial.

  1. €150 per year
  2. or €15 per month
  3. Cancel anytime

EUobserver is an independent, not-for-profit news organization that publishes daily news reports, analysis, and investigations from Brussels and the EU member states. We are an indispensable news source for anyone who wants to know what is going on in the EU.

We are mainly funded by advertising and subscription revenues. As advertising revenues are falling fast, we depend on subscription revenues to support our journalism.

For group, corporate or student subscriptions, please contact us. See also our full Terms of Use.

If you already have an account click here to login.

  • Confidential details of EU institution staff were hacked and released (Photo: MyTudut)

Among the victims are administrators and officials at the European Commission, Eurojust (an EU body fighting organised crime), the European External Action Service, the European Parliament and Brussels-based think-tank the European Policy Centre (EPC).

Some have yet to be informed of the breach.

EUobserver on Monday (9 January) spoke to EPC analyst Amanda Paul who was unaware that her credit card number, password, mobile telephone number, mail address and email are floating in the public domain.

This website read her credit card number to her over the phone to confirm authenticity. After a very brief phone interlude, she promptly called her credit card company to cancel her card and change her email password.

All together, some 850,000 confidential details were released when Anonymous hacked into the Texas-based Stratfor Global Intelligence security firm.

Stratfor is a widely used private security research company. About 75,000 of its paying subscribers also had their credit card details disclosed, including some working for the EU institutions.

The leaked database has 19,000 email addresses ending in the .mil domain of the US military according to the Guardian newspaper. The list also included 242 Nato staff members.

"This company has suffered a blow to its reputation," Andreas Hartmann of the European Parliament's policy department on Citizens' Rights and Constitutional Affairs told this website.

Hartmann's confidential details were also breached, but he said "numerous actors" immediately informed him. He would not go into further detail.

"I immediately blocked my account. I didn't suffer any problems," he said, adding that he was satisfied by Stratfor's prompt response and communication on the matter.

Last year, Hartmann headed a study on the parliamentary oversight of security and intelligence agencies in the European Union.

For his part, Fred Burton, Stratfor's vice president of intelligence made a YouTube address on 28 December assuring paid subscribers they would be informed of the breach with details on how to protect their data. The company's website is still offline and has since been replaced by a page informing customers they will be entitled to a free one-year data identity coverage from a partner firm as compensation.

"Perhaps the reason Stratfor's taking its time to get back online is because they simply have no infrastructure anymore," anonymouSabu, one of the alleged masterminds behind Anonymous, tweeted on Saturday (7 January). According to Anonymous, the details were easily hacked because Stratfor did not run routine encryption on the data.

The entire operation could cast a long shadow over intense US lobbying against a leaked draft proposal for a Data Protection Regulation from the European Commission this past December.

Among the US complaints are the European Commission's views on data breach requirements, which they consider as "overly" severe and could undermine corporate data security practices.

"It is interesting to note that the US document tends to oppose specific proposals, such as the notification deadline and fines, in support of the vague issues such as not distracting businesses from improving corporate data security practices," wrote Joe McNamee in an email to EUobserver.

McNamee is an EU advocacy co-ordinator at European Digital Rights.

Public consultation of the draft ends on 15 January, with European Commissioner Viviane Reding, in charge of fundamental rights, expected to release a final draft of the directive before the end of the month.

A previous version of this article gave Andreas Hartmann of the European Parliament's policy department on Citizens' Rights and Constitutional Affairs the wrong job description. This mistake has since been corrected.

EU firms among targets in epic-scale hack

An unnamed state actor, believed by some experts to be China, has plundered data from three EU companies, on top of 69 other victims worldwide.

Hackers stole Van Rompuy's emails

Hackers last summer raided the emails of EU Council chief Herman Van Rompuy and 10 other senior EU officials.

EU parliament blocks websites 'to protect' staff

The EU parliament is routinely blocking websites such as Reddit or even the BBC in what internet security experts see as an exaggerated response to a virus which uses social networks.

Romania wants EU signal on Schengen membership

Bucharest expects other member states to decide on its accession to the passport-free area before it takes the rotating EU presidency on 1 January 2019 - amid criticism of a controversial new justice reform.

Germany says China using LinkedIn to recruit informants

Germany's spy agency says the Chinese state is trying to recruit high-ranking German officials via social media outlets like LinkedIn. It accused Chinese intelligence of setting up fake profiles to lure them into becoming informants.

Stakeholders' Highlights

  1. Dialogue PlatformThe Gülen Community: Who to Believe - Politicians or Actions?" by Thomas Michel
  2. Plastics Recyclers Europe65% plastics recycling rate attainable by 2025 new study shows
  3. European Heart NetworkCommissioner Andriukaitis' Address to EHN on the Occasion of Its 25th Anniversary
  4. ACCACFOs Risk Losing Relevance If They Do Not Embrace Technology
  5. UNICEFMake the Digital World Safer for Children & Increase Access for the Most Disadvantaged
  6. European Jewish CongressWelcomes Recognition of Jerusalem as the Capital of Israel and Calls on EU States to Follow Suit
  7. Mission of China to the EUChina and EU Boost Innovation Cooperation Under Horizon 2020
  8. European Gaming & Betting AssociationJuncker’s "Political" Commission Leaves Gambling Reforms to the Court
  9. AJC Transatlantic InstituteAJC Applauds U.S. Recognition of Jerusalem as Israel’s Capital City
  10. EU2017EEEU Telecom Ministers Reached an Agreement on the 5G Roadmap
  11. European Friends of ArmeniaEU-Armenia Relations in the CEPA Era: What's Next?
  12. Mission of China to the EU16+1 Cooperation Injects New Vigour Into China-EU Ties

Latest News

  1. Estonia completes two out of three priority digital bills
  2. EU countries are not 'tax havens', parliament says
  3. Tech firms' delays mean EU needs rules for online terror
  4. Slovak PM: Human rights are not a travel pass to EU
  5. British PM limps to EU capital after Brexit defeat
  6. US pleads for clarity on Brexit aviation 'black hole'
  7. Tusk migration note prompts institutional 'hysteria'
  8. Migration looms over summit, as Africa pledges fall short

Stakeholders' Highlights

  1. EPSUEU Blacklist of Tax Havens Is a Sham
  2. EU2017EERole of Culture in Building Cohesive Societies in Europe
  3. ILGA EuropeCongratulations to Austria - Court Overturns Barriers to Equal Marriage
  4. Centre Maurits CoppietersCelebrating Diversity, Citizenship and the European Project With Fundació Josep Irla
  5. European Healthy Lifestyle AllianceUnderstanding the Social Consequences of Obesity
  6. Union for the MediterraneanMediterranean Countries Commit to Strengthening Women's Role in Region
  7. Bio-Based IndustriesRegistration for BBI JU Stakeholder Forum about to close. Last chance to register!
  8. European Heart NetworkThe Time Is Ripe for Simplified Front-Of-Pack Nutrition Labelling
  9. Counter BalanceNew EU External Investment Plan Risks Sidelining Development Objectives
  10. EU2017EEEAS Calls for Eastern Partnership Countries to Enter EU Market Through Estonia
  11. Dialogue PlatformThe Turkey I No Longer Know
  12. World Vision7 Million Children at Risk in the DRC: Donor Meeting to Focus on Saving More Lives