3 ms·
SolarWinds is orders of magnitude more significant (or will be, in the fullness of time) than anything that targeted the personal data of individuals. Back in
by Blahah 5y ago
SolarWinds is orders of magnitude more significant (or will be, in the fullness of time) than anything that targeted the personal data of individuals.
Back in the early 2000s I was a mod on shadowcrew (served my time for that) and the volume of personal data that was being shared was staggering. Most multinationals I can name that existed at the time were trivially infiltrated by botnets and had every accessible database and file scrutinised. Hundreds of millions of people have had most of their pseudoprivate information exfiltrated. Mostly it just caused inconvenience - not to diminish the harm done when it was more than that. The point is that each datum relates to one person and requires a lot of effort to exploit. By contrast, national or international organisations and people or groups of prominence have much higher value secrets.
The most significant one that's public that I know of is the T-mobile hack by ethics [0] - full access during 2003-2004 to every message, photo, email and internal tools. Among other things, the US Secret Service were using T-mobile as their email and phone service provider. Every USSS communication was able to be monitored in realtime, and many were being live posted to IRC. Same for hundreds of celebrities, politicians, and criminals. I doubt the USSS were the only organisation compromised then, but they are the only one I know of for certain.
I would be absolutely amazed if there aren't more significant and recent similar hacks given the increasing centralisation of communication and information infrastructure.
0: https://www.theregister.com/2005/01/12/hacker_penetrates_t-mobile/ https://www.theregister.com/2005/01/12/hacker_penetrates_t-m...