Feeds

Hertfordshire plod passwords leaked by pro-Assange data burglar

Database raid by lackadaisical protestor

High performance access to file storage

A UK police website has been hacked, exposing usernames, unencrypted passwords and other sensitive login details for more than 90 serving officers.

The miscreant who raided the Hertfordshire force's database also lifted and leaked workplace phone numbers, email addresses, warrant numbers and PINs of the county's Safer Neighbourhood Team.

The hacker claims to be a sympathiser of Julian Assange, who is holed up in Ecuador's embassy in London to avoid extradition to Sweden, and the digital break-in is seen as a protest against efforts by UK police to arrest the Wikileaker-in-chief.

The home county's top cops have suspended part of the knackered website as a precaution while tech sleuths investigate the breach, as this statement explains:

Hertfordshire Constabulary is currently investigating following the publication on the internet of information stored on a database linked to the public Safer Neighbourhoods pages of the external constabulary website.

As a precaution these pages have been temporarily disabled whilst the circumstances as to how this information was obtained is investigated.

There is absolutely no suggestion that any personal data relating to officers or members of the public has been, or could have been compromised. Nevertheless matters of IT security are extremely important to the constabulary and an investigation is already under way.

The black hat hacker who claimed responsibility for the breach leaked what looks like records from the Hertfordshire Police website database along with a quote from Assange and an "OpFreeAssange" banner. The miscreant involved dissociated himself from Anonymous by saying he was not a member of the hacktivist collective.

He stated: "I am not a member of Anonymous. Do whatever the fuck you want with this information, I don't give a fuck! This is nothing big not some l33t h4x shit... but this tells how insecure the web is."

Anonymous has run a number of operations in support of Wikileaks and Assange over recent months, including attacking banks and PayPal for blocking the whistle-blowing website's online fundraising efforts.

Cops are poised outside the Ecuadorian embassy in west London ready to cuff Assange should he attempt to make a break for it. The UK authorities have agreed to extradite Assange to Sweden for questioning over sexual assault allegations made by two women. The Wikileaks founder preempted his arrest by legging it to the embassy and successfully applying for asylum. ®

High performance access to file storage

More from The Register

next story
Obama allows NSA to exploit 0-days: report
If the spooks say they need it, they get it
Web data BLEEDOUT: Users to feel the pain as Heartbleed bug revealed
Vendors and ISPs have work to do updating firmware - if it's possible to fix this
OpenSSL Heartbleed: Bloody nose for open-source bleeding hearts
Bloke behind the cockup says not enough people are helping crucial crypto project
One year on: diplomatic fail as Chinese APT gangs get back to work
Mandiant says past 12 months shows Beijing won't call off its hackers
Call of Duty 'fragged using OpenSSL's Heartbleed exploit'
So it begins ... or maybe not, says one analyst
Heartbleed exploit, inoculation, both released
File under 'this is going to hurt you more than it hurts me'
Bad PUPPY: Undead Windows XP deposits fresh scamware on lawn
Installing random interwebs shiz will bork your zombie box
Experian subsidiary faces MEGA-PROBE for 'selling consumer data to fraudster'
US attorneys general roll up sleeves, snap on gloves
prev story

Whitepapers

Mainstay ROI - Does application security pay?
In this whitepaper learn how you and your enterprise might benefit from better software security.
Five 3D headsets to be won!
We were so impressed by the Durovis Dive headset we’ve asked the company to give some away to Reg readers.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Mobile application security study
Download this report to see the alarming realities regarding the sheer number of applications vulnerable to attack, as well as the most common and easily addressable vulnerability errors.