Story image

NASA got hacked (again)

20 Dec 18

The US National Aeronautics and Space Administration (NASA) is one of 2018’s latest data breach casualties, according to media reports.

Website SpaceRef published a NASA internal company memo appearing to coming from Bob Gibbs, NASA’s assistant administrator in the Office of Chief Human Capital Officer.

The memo claims that criminals potentially gained access to NASA servers on October 23, 2018. The compromised servers stored personally identifiable information (PII) belonging to current and former NASA employees. That information included social security numbers and other data.

NASA Civil Service employees who were onboarded, separated from NASA, or transferred between locations from July 2006 to October 2018 may be affected.

The memo was sent to all NASA employees, regardless of whether they were affected by the breach. 

“Once identified, NASA will provide specific follow-up information to those employees, past and present, whose PII was affected, to include offering identity protection services and related resources, as appropriate,” the memo allegedly states.

NASA says that it took immediate action to secure servers and data as soon as it discovered the breach.

“NASA and its Federal cybersecurity partners are continuing to examine the servers to determine the scope of the potential data exfiltration and identify potentially affected individuals. This process will take time. The ongoing investigation is a top agency priority, with senior leadership actively involved. NASA does not believe that any Agency missions were jeopardized by the cyber incidents,” the memo states.

NASA’s leadership team stresses that it takes personal information protection and information security seriously.

“NASA is continuing its efforts to secure all servers, and is reviewing its processes and procedures to ensure that the latest security practices are being followed throughout the agency,” the memo concludes.

While NASA has not yet released any public statements about the breach, the company is no stranger to being a target.

Back in 2016 hacking group AnonSec leaked almost 276GB of confidential NASA data. 

The group even went so far as trying to hack and crash a $222 million NASA drone into the Pacific Ocean. But before the group could crash the drone, NASA spotted the security anomaly and took manual control.

In 2013, an Italian hacker belonging to the ‘Master Italian Hackers Team’ gained access and ‘defaced’ a number of NASA Ames Research Center subdomains, as well as a slew of Italian government websites.  In October 2018, the 25-year-old hacker was sentenced. He was caught after allegedly boasting about the hacks online.

IoT breaches: Nearly half of businesses still can’t detect them
The Internet of Thing’s (IoT’s) rapid rise to prominence may have compromised its security, if a new report from Gemalto is anything to go by.
Carbon Black: What does cybersecurity have in store for 2019?
Tom Kellerman has shared five insights for the year ahead, including a particularly bold one.
Hands-on review: The Ekster Wallet protects your cards against RFID attacks
For some time now, I’ve been protecting my credit cards with tinfoil. The tinfoil hat does attract a lot of comments, but thanks to Ekster, those days are now happily behind me.
Report on SingHealth breach condemns poor security practices
The 2018 Singapore SingHealth data breach was poorly managed and riddled with vulnerabilities from the start.
Tesla wants people to hack its Model 3
Tesla is offering white hat hackers what could be the chance of a lifetime – the opportunity to hack one of its Model 3 vehicles.
How to tackle cyber threats in your home
How should you start securing your devices? The company has provided tips for actions you can take across social media, home routers, TVs, and many more.
Endace joins IBM Security app exchange community
EndaceProbe Network Analytics Platform captures, indexes, and stores network traffic while hosting a variety of network security and performance monitoring applications.
Datto names new CEO as founder steps back
Austin McChord continues as a board member as the former president and COO takes over as CEO.