Thousands of Capitol Hill staffers’ info spilled across dark web, security firm says
Proton probe warns of 'critical security lapse' that could leave many exposed, exploited
by Ryan Lovelace - The Washington Times - Tuesday, September 24, 2024
A version of this story appeared in the daily Threat Status newsletter from The Washington Times. Click here to receive Threat Status delivered directly to your inbox each weekday.
Personal information for some 3,191 congressional staffers has been leaked across the dark web, according to new research from internet security firm Proton being released Tuesday.
The firm said the data available in the hidden online hubs includes passwords, IP addresses and information from social media platforms.
“Many of these leaks likely occurred because staffers used their official email addresses to sign up for various services, including high-risk sites such as dating and adult websites, which were later compromised in data breaches,” Proton said in a statement. “This situation highlights a critical security lapse, where sensitive work-related emails became entangled with less secure, third-party platforms.”
Proton, working with the firm Constella Intelligence, said it uncovered 1,848 passwords belonging to the political staffers available on the dark web, the digital underground frequented by hackers perusing difficult-to-find information.
The research showed one staffer alone had 31 passwords exposed online.
“The volume of exposed accounts among U.S. political staffers is alarming, and the potential consequences of compromised accounts could be severe,” said Eamonn Maguire, Proton head of account security, in a statement. “Vigilance and strict security measures are essential to safeguard personal and national security.”
The Switzerland-based Proton estimated that the information on nearly 1 in 5 congressional staffers is visible online. Nearly 300 staffers had their data exposed in more than 10 separate leaks.
more
https://www.washingtontimes.com/news/2024/sep/24/thousands-of-capitol-hill-staffers-info-spilled-ac/