UK govt links 2021 Electoral Commission breach to Exchange server
ID: d08bcf5a-f3eb-59cb-af72-6dda10ee5f86
STIX ID: report--d08bcf5a-f3eb-59cb-af72-6dda10ee5f86
Feed Name: Bleeping Computer
Threat Score
The UK Information Commissioner's Office reported that the Electoral Commission was compromised in 2021 after failing to patch on-premises Microsoft Exchange ProxyShell vulnerabilities; attackers (attributed to a Chinese state-backed actor) deployed web shells and backdoors, accessed personal data for about 40 million people, and the ICO reprimanded the Commission for inadequate patching and password management.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.