United States Department of Homeland Security transportation worker Identification hit by hacking incident

Year

2012

Month

June

Reference number

20120602

Impact area

Shore

Incident location

Incident country

USA

Victim country

USA

Victim identity

United States Department of Homeland Security Transportation Worker Identification (Maritime Transportation Security Act)

Victim Type

Other Government

Method

Hacking

Attacker country

USA

Summary:

In June 2012, the United States Department of Homeland Security transportation worker Identification was hit by an hacking incident. The attackers hacked at least one DHS-TWIC protected computer and downloaded its database schema. Team Digi7al Twitter account was used to make unlawful public disclosure. They did it because of boredom. The hackers found they were 'somewhat politically inclined to release the things [they had]'. Also because it was 'fun and we can'. The impact of the incident was theft of biometric and other sensitive personal information of transportation workers. Unlawful disclosure of database schema through Twitter, damaging DHS-TWIC's website by making it vulnerable to future attacks. The threat actor was TeamDigi7al (Nicholas Paul Knight, while on USS Harry S. Truman and Daniel Trenton Krueger). It is not exactly clear what measures the company took during and after the incident.

Reference URL

https://www.theatlantic.com/technology/archive/2014/05/the-hacker-who-worked-on-a-navy-nuclear-aircraft-carrier/361952/  
https://cdn.theatlantic.com/assets/media/img/posts/050514_Knight.pdf
https://www.govtech.com/security/cybersecurity-options-lag-behind-hackers-abilities.html
https://nakedsecurity.sophos.com/2014/05/12/us-navy-sailor-allegedly-led-team-that-hacked-government-computers/ https://www.justice.gov/sites/default/files/usao-ndok/legacy/2015/04/03/Information-Krueger.pdf