ALL NEWS

An entire nation just got hacked

Jul 22, 2019, 6:07 AM | Updated: 6:10 am

Iran digital intrusion...

(Stock Photo)

(Stock Photo)

(CNN) — Asen Genov is pretty furious. His personal data was made public this week after records of more than 5 million Bulgarians got stolen by hackers from the country’s tax revenue office.

In a country of just 7 million people, the scale of the hack means that just about every working adult has been affected.

“We should all be angry. … The information is now freely available to anyone. Many, many people in Bulgaria already have this file, and I believe that it’s not only in Bulgaria,” said Genov, a blogger and political analyst. He knows his data was compromised because, though he’s not an IT expert, he managed to find the stolen files online.

The attack is extraordinary, but it is not unique.

Government databases are gold mines for hackers. They contain a huge wealth of information that can be “useful” for years to come, experts say.

“You can make (your password) longer and more sophisticated, but the information the government holds are things that are not going to change,” said Guy Bunker, an information security expert and the chief technology officer at Clearswift, a cybersecurity company.

“Your date of birth is not going to change, you’re not going to move house tomorrow,” he said. “A lot of the information that was taken was valid yesterday, is valid today, and will probably be valid for a large number of people in five, 10, 20 years’ time.”

Hackers’ paradise

Data breaches used to be spearheaded by highly skilled hackers. But it increasingly doesn’t take a sophisticated and carefully planned operation to break into IT systems. Hacking tools and malware that are available on the dark web make it possible for amateur hackers to cause enormous damage.

A strict data protection law that came into effect last year across the European Union has placed new burdens on anyone who collects and stores personal data. It also introduced hefty fines for anyone who mismanages data, potentially opening the door for the Bulgarian government to fine itself for the breach.

Still, attacks against government systems are on the rise, said Adam Levin, the founder of CyberScout, another cybersecurity firm. “It’s a war right now — one we will win if we make cybersecurity a front-burner issue,” he said.

The notion that governments urgently need to step up their cybersecurity game is not new. Experts have been ringing alarm bells for years.

The US Department of Veterans Affairs suffered one of the first major data breaches in 2006, when personal data of more than 26 million veterans and military personnel were compromised.

“And it was all, ‘Oh, this is dreadful. We must do things to stop it.’ … And here we are, 13 years later, and an entire country’s data has been compromised, and in between, there’s been incidents of large swathes of citizen data being compromised in different countries,” Bunker said.

Out-of-date systems are often the problem. Some governments may have used private companies to manage the data they collected before the array of hacks and breeches brought their attention to cybersecurity.

“In many cases, our data was sent to third-party contractors years ago,” Levin said. “The way we looked at data management 10 years ago seems antiquated today, yet that old data is still out there being managed by third parties, using legacy systems.”

If the “old data” hasn’t changed, it’s still valuable to hackers.

The Bulgaria incident is concerning, said Desislava Krusteva, a Bulgarian privacy and data protection lawyer who advises some of the world’s biggest tech companies on how to keep their clients’ information safe.

“These kinds of incidents should not happen in a state institution. It seems like it didn’t require huge efforts, and it’s probably the personal data of almost all Bulgarian citizens,” said Krusteva, a partner at Dimitrov, Petrov & Co., a law firm in Sofia.

The Bulgarian Commission for Personal Data Protection has said it would launch an investigation into the hack.

A National Revenue Agency spokesman would not comment on whether the data was properly protected.

“As there is undergoing investigation, we couldn’t provide more details about reasons behind the hack,” Communications Director Rossen Bachvarov said.

‘Very embarrassing for the government’

A 20-year-old cybersecurity worker has been arrested by the Bulgarian police in connection with the hack. The computer and software used in the attack led police to the suspect, according to the Sofia prosecutor’s office.

The man has been detained, and the police seized his equipment, including mobile phones, computers and drives, the prosecutor’s office said in a statement. If convicted, he could spend as long as eight years in prison.

“It’s still too early to say what exactly happened, but from political perspective, it is, of course, very embarrassing for the government,” Krusteva said.

The embarrassment is made worse by the fact that this was not the first time the Bulgarian government was targeted. The country’s Commercial Registry was brought down less than a year ago by an attack.

“So, at least for a year, the Bulgarian society, politicians, those who are in charge of the country, they knew quite well about the serious cybersecurity problems in the government infrastructures,” Genov said, “and they didn’t do anything about it.”

The-CNN-Wire
™ & © 2019 Cable News Network, Inc., a Time Warner Company. All rights reserved.

We want to hear from you.

Have a story idea or tip? Send it to the KSL NewsRadio team here.

All News

A car ran into a house in Hurricane Sunday morning, police say. No injuries to the driver or the oc...

Devin Oldroyd

Car crashes into house in Hurricane Sunday morning

A car ran into a house in Hurricane Sunday morning, police say. No injuries to the driver or the occupants of the house were reported.

6 hours ago

FILE — Handcuffs hang from a rail inside the Wasatch entry of the old Utah State Prison in Draper...

Mary Culbertson, KSLTV

Man accused of manslaughter after allegedly selling fentanyl that led to overdose

One man was arrested and accused of manslaughter after authorities believe he sold fentanyl to a victim who died of overdose.

7 hours ago

Kenneth Mitchell, here in 2018, has died....

Megan Thomas, CNN

Kenneth Mitchell, ‘Star Trek’ and ‘Marvel’ actor, dead at 49

Originally Published: 25 FEB 24 14:49 ET Updated: 25 FEB 24 15:05 ET (CNN) — Kenneth Mitchell, an actor who appeared in the series “Star Trek: Discovery” and Marvel’s “Captain Marvel,” has died, his family announced in a statement shared on his verified social media Sunday. He was 49. “With heavy hearts we announce the […]

9 hours ago

Charles E. Escalera, 21...

Michelle Watson and Maria Sole Campinoti, CNN

Kentucky man arrested in connection with death of Campbellsville University student

A man has been arrested in connection with the death of a student at Campbellsville University in Kentucky.

11 hours ago

Utah Gov. Spencer Cox, left, and President Joe Biden toast before Biden speaks to members of the Na...

Darlene Superville

Biden and Utah’s governor call for less bitterness and more bipartisanship in the nation’s politics

President Joe Biden and Utah Gov. Spencer Cox spoke at the White House during a black-tie dinner for the nation's governors.

15 hours ago

Republican presidential candidate former President Donald Trump speaks at a primary election night ...

MEG KINNARD and WILL WEISSERT Associated Press

Trump wins South Carolina, easily beating Haley in her home state and closing in on GOP nomination

Donald Trump won South Carolina's Republican primary on Saturday further consolidating his path to a third straight GOP nomination.

1 day ago

Sponsored Articles

Mother and cute toddler child in a little fancy wooden cottage, reading a book, drinking tea and en...

Visit Bear Lake

How to find the best winter lodging in Bear Lake, Utah

Winter lodging in Bear Lake can be more limited than in the summer, but with some careful planning you can easily book your next winter trip.

Happy family in winter clothing at the ski resort, winter time, watching at mountains in front of t...

Visit Bear Lake

Ski more for less: Affordable ski resorts near Bear Lake, Utah

Plan your perfect ski getaway in Bear Lake this winter, with pristine slopes, affordable tickets, and breathtaking scenery.

front of the Butch Cassidy museum with a man in a cowboy hat standing in the doorway...

Bear Lake Convention and Visitors Bureau

Looking Back: The History of Bear Lake

The history of Bear Lake is full of fascinating stories. At over 250,000 years old, the lake has seen generations of people visit its shores.

silhouette of a family looking over a lake with a bird in the top corner flying...

Bear Lake Convention and Visitors Bureau

8 Fun Activities To Do in Bear Lake Without Getting in the Water

Bear Lake offers plenty of activities for the whole family to enjoy without having to get in the water. Catch 8 of our favorite activities.

Wellsville Mountains in the spring with a pond in the foreground...

Wasatch Property Management

Advantages of Renting Over Owning a Home

Renting allows you to enjoy luxury amenities and low maintenance without the long-term commitment and responsibilities of owning a home.

Clouds over a red rock vista in Hurricane, Utah...

Wasatch Property Management

Why Southern Utah is a Retirement Paradise

Retirement in southern Utah offers plenty of cultural and recreational opportunities. Find out all that this region has to offer.

An entire nation just got hacked