AfD Hosting Breach Exposes 300 GB of Emails and 345,000 Unique Email Addresses
A breach of infrastructure serving Germany’s Alternative für Deutschland (AfD) exposed approximately 300 GB of data, including hundreds of thousands of emails and attachments. The stolen material was published online in October with searchable AI-generated summaries and downloadable original files. Have I Been Pwned recorded approximately 345,000 unique email addresses in the exposed data; that figure does not indicate the number of compromised mailboxes. AfD confirmed an attack on its hosting provider, identified in subsequent reporting as the party-owned Alternita Dienstleistungs GmbH, but said only a few mailboxes had been copied. An investigation by Lilith Wittmann, conducted with Hoodinformatik and drawing on accounts from the attackers and people associated with the hosting operation, identified an inadequately secured WordPress instance at wahlkampf.afd.de as the initial entry point. Attackers reportedly installed WP-Console to obtain command-line access, accessed mail administration, changed officials’ email passwords, and extracted data through file-hosting services and bulk IMAP requests. The investigation placed detection as early as September 9, followed by another intrusion five days later, while AfD’s statement dated the attack to late September. The party said it notified affected mailbox owners and the data protection officer, contacted security authorities, and reported the attack and publication to law enforcement. It also disputed the accuracy and contextual treatment of the published AI-generated summaries.. Fonte: https://mallory.ai/stories/01a17c72-af3a-7ae7-9fe2-9b86fda8e6ec
Itagora tiene in archivio titolo e sommario per la ricerca interna. Il testo completo resta sulla fonte. Il link in uscita non invia referrer.