NATO Secret Missile Data Found On The Dark Web

NATO is urgently investigating a data leak, including blueprints of sophisticated weapons, that have evidently been stolen for European missile systems firm MBDA.  In August, the French missile producer acknowledged that it had been the subject of a blackmail attempt purported by a criminal group and hackers have placed the stolen data for sale on the Dark Web

MBDA confirms that the data for sale does belong to them and that the breach appears to have been in the form of a ransomware attack. They say the stolen data was acquired from a compromised external hard drive, rather than internal networks. It is understood investigations are centered on one of MBDA's suppliers.

MBDA Missile Systems headquarters are located in France and sells weapons to several different NATO countries.  Last year it posted revenue of £3.5bn and counts the British Ministry of Defence, the US military and NATO as customers for its weapons systems. The company was created in December 2001 after the merger of missile systems companies in France, Italy and the UK and is the world’s second largest manufacturer of missiles. The company has manufacturing plants in France, Italy, Britain, and Spain and employs over 13,000 people.

MBDA has three main product lines: air-to-air missiles, air-to-surface missiles, and surface-to-air missiles. Its products are used by the militaries of more than 40 countries. 

MBDA was the subject of a blackmail attempt by a criminal group that falsely claims to have hacked the company’s information networks. Following the company’s refusal to yield to this blackmail threat and pay a ransom demand, the criminal group has spread information on the Internet, making it accessible for a payment. This failed ransom attempt is the subject of an investigation by the Italian security agencies.

The company refused to submit to a ransom demand and the alleged non-classified information was subsequently leaked online. The data for sale on both Russian and English-language forums and consists of 80GB and is currently listed for 15 bitcoins, worth around $300,000. The cyber criminals are understood to have already sold the data to at least one buyer.

MBDA Systems:     Oodaloop:   Dark Reading:   BBC:    HackreadFortune

You Might Also Read: 

Killnet Turn Their Attention To Lockheed Martin:


 

« Dutch Town Sues Twitter For Paedophile Conspiracy
DARPA Wants To Play With Artificial Intelligence »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Clayden Law

Clayden Law

Clayden Law advise global businesses that buy and sell technology products and services. We are experts in information technology, data privacy and cybersecurity law.

ON-DEMAND WEBINAR: How to build and implement an effective endpoint detection and response strategy

ON-DEMAND WEBINAR: How to build and implement an effective endpoint detection and response strategy

Discover how you can implement endpoint detection and response (EDR) tools into your security strategy.

Cyber Security Supplier Directory

Cyber Security Supplier Directory

Our Supplier Directory lists 6,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

DigitalStakeout

DigitalStakeout

DigitalStakeout enables cyber security professionals to reduce cyber risk to their organization with proactive security solutions, providing immediate improvement in security posture and ROI.

Parasoft

Parasoft

Parasoft is an independent software testing and software quality assurance tool and solution vendor.

KnowBe4

KnowBe4

KnowBe4 is an integrated platform for security awareness training combined with simulated phishing attacks.

Falanx Cyber

Falanx Cyber

Falanx Cyber provides enterprise-class cyber security services and solutions. We deliver end-to-end cyber capabilities, either as specific engagements or as fully-managed services.

Apomatix

Apomatix

Apomatix is a platform that simplifies the complexity of cyber risk audit and management.

One Identity

One Identity

One Identity delivers identity governance, access management, and privileged account management solutions that facilitate and secure your digital transformation.

Comarch

Comarch

Comarch is a provider of IT business solutions to optimize operational and business processes. Cyber security solutions are focused on Identity Management and Security Assessment services.

TechArch

TechArch

TechArch helps customers to optimize their investments in cybersecurity by providing them independent and vendor-neutral consultation and guidance.

Callsign

Callsign

Callsign’s mission is to seamlessly power the identification of every web, mobile and physical interaction.

Consortium for Information & Software Quality (CISQ)

Consortium for Information & Software Quality (CISQ)

The mission of CISQ is to develop international standards for software quality and to promote the development and sustainment of secure, reliable, and trustworthy software.

Lifespan Technology

Lifespan Technology

Lifespan Technology provides the full range of IT Asset Disposition services. This includes hardware recycling and disposal, data destruction, and hardware resale.

e-Careers

e-Careers

e-Careers is an edtech institution that provides industry recognised courses and up-skilling solutions to individuals and organisations.

Kainos

Kainos

Kainos is a leading provider of Digital Services and Platforms. Our services include Digital Transformation, Cyber Security, Cloud, AI, IoT and more.

Securosys

Securosys

Securosys is a technology company dedicated to securing data and communications. We develop, produce, and distribute hardware, software and services that protect and verify data and their transmission

Conversant Group

Conversant Group

Conversant Group is an IT infrastructure and security consulting company, providing technical, organizational, procedural, and process consulting internationally.

Probity

Probity

Probity Inc. is a certified software development and systems engineering company, providing support to federal government and national defense related clients.

Cyderes

Cyderes

Cyderes (Cyber Defense and Response) is a global, pure-play, full life-cycle cyber security services provider formed from the merger of Herjavec Group and Fishtech Group in 2022.