Hackers got into the hands of personal data of almost all residents of the Republic of Buryatia

Source: https://cobaltstrike.net/2022/03/25/hackers-got-into-the-hands-of-personal-data-of-almost-all-residents-of-the-republic-of-buryatia/

According to Medusa (who is a foreign agent), pro-Ukrainian hackers hacked an information service based on the “Unified Regional Integration Platform of the hardware and software complex “Safe City”. Hackers gained access to the universal medical Personal account (UMLC), created in the spring of 2020 to account for COVID-19 patients, contact persons, persons tested for covid, and visitors from other regions who were supposed to remain in self-isolation.

Representatives of the “closed group of the Ukrainian cyber resistance” told about the hacking — and provided a file in which, in particular, there were addresses and phone numbers of the head of Buryatia Alexey Tsydenov, the chairman of the republican Supreme Court Albina Kirillova and the speaker of the local parliament Vladimir Pavlov. In total – 692 thousand lines with a unique surname, first name and patronymic. The journalists verified this leak with the help of another one – the data of Yandex.Food users.

Hackers managed to get logins and passwords from several UMLK system accounts and sent us the data of one such account (the screenshot above is from this account). The login and password turned out to be exactly the same: these are the initials and surname of one of the employees who had access to the system, typed in lowercase Latin.

The head of Buryatia reacted to a report by a number of media outlets that personal data of almost all residents of the republic, including top officials of the region, fell into the hands of hackers. According to Alexey Tsydenov, the government of Buryatia is now checking this information.

“Please note that the presence of a telephone number, residential address and surname, first name and patronymic do not make it possible to carry out transactions with bank accounts. Possible leakage of personal data does not give access to bank accounts. It looks like disinformation, the purpose of which is to cause a stir among the population. However, residents of Buryatia need to be vigilant, not to answer unfamiliar calls, not to report any information to strangers,” the head of Buryatia said.

Start a discussion …