Lulz warns NHS of sick security
No waiting list for admin passwords
Agentless Backup is Not a Myth
LulzSec, the security collective which claimed credit for hacking Sony, has taken to Twitter to warn the NHS that it stumbled across several admin passwords.
The Department of Health claimed the breach was nothing more serious than "a very small number of website administrators". It said no national systems were hit - given the slow progress of creating such national systems this might not be a surprise.
Lulz published an email sent to the NHS with the relevant passwords blacked out.
It said:
We're a somewhat known band of pirate-ninjas that go by LulzSec.
Some time ago, we were traversing the Internets for signs of enemy fleets.
While you aren't considered an enemy - your work is of course brilliant - we did stumble upon several of your admin passwords, which are as follows....
We mean you no harm and only want to help you fix your tech issues. Also, we hope that little girls feasts on the bones of many giving souls. All the best.
Lulz Security
And no, we don't have any idea what "little girls feasts" means either.
At least the breach is not quite as embarrassing as the recent failure by FBI partner Infraguard which was hacked this week.
COMMENTS
Brownie points
Kudos to LulzSec. Not a smash and grab but an advisory.
There will be the 'Yeah, but they are just saying that, you don't know what else they've taken', but I'm mug enough to beleive that they are mainly interested in showing up the commercial twats like Sony.
Back on topic
It's sad to see the Dept of Health shrugs it off as "nothing serious" - that's kind of the point. They're trying to give a friendly heads-up before someone else comes along and makes it serious.
In this particular case, no.
I cannot see much personal cachet in leaking the personal details of an organisation that provides subsidised heath care to the masses.
Now, if it was a American _private_ health insurance company, where 30% goes to "administrative fees", and where having your tonsils out costs $10,000, that would be a different matter.
IT infrastructure monitoring strategies
Requirements Checklist for Choosing a Cloud Backup and Recovery Service Provider
Data control in the cloud
Cloud based data management
Agentless Backup is Not a Myth
