MCAD Maritime Cyber Attack Database
Year2012 |
MonthJune |
Reference number20120601 |
Impact areaShore |
Incident location |
Incident countryUSA |
Victim countryUSA |
Victim identityUnited States Navy |
Victim TypeNavy, Vessel |
MethodHacking |
Attacker countryUSA |
In June 2012, the United States Navy got hit by a hacking attack. The attackers employed a common hacking technique called a SQL injection, in which attackers probe a database to understand and (ultimately) exploit it. They did it because of boredom. The hackers found they were 'somewhat politically inclined to release the things [they had]'. Also because it was 'fun and we can'. The impact of hacking the Navy-SWM was theft of confidential information of approximately 220,000 Navy servicepeople who were being transferred. They posted the information, with social security numbers redacted, and crowed about it on Twitter. As a result Navy-SWM was shut down and never resumed operation. Over 700 deployed overseas Service Members could not access logistical support for transfers for more than 10 weeks. Caused loss to the Navy of approximately 514,000 dollars. The threat actor was TeamDigi7al (Nicholas Paul Knight, while on USS Harry S. Truman and Daniel Trenton Krueger). It is not exactly clear what measures the company took during and after the incident.
