Hacker targets Indian defense contractor and leaks sensitive data on dark web

Hackers have attacked the firm and have caused a data breach of sensitive defense data.

Indian defense contractor Bharat Earth Movers Limited (BEML) has suffered a data breach that led to the leaking of sensitive internal documents on underground marketplaces on the dark web. BEML is a Bengaluru-based public sector defense undertaking that manufactures equipment for the construction, cement, power, steel, rail, fertilizer, and irrigation sector.

The breach occurred on 25th May, the attacker was able to steal login credentials of seven employees and the breached files were downloaded by this email ids. After using the email credentials of this employees the hacker shared this credentials on dark web as a text file.

Once the attacker could log in to the employees’ email accounts, the old passwords were changed to terms like “FreeKashm!r” and “GoToHellBJP!!1,” which is why Cyble suspected that threat actor from a neighboring country or a government-sponsored hacktivist was involved.

The data breach at a defense organization which takes care of the defense of the country and sensitive data related to it can be very costly and dangerous at the same time. For a country to loose some defensive secrets and plannings that they have can result in various attacks and a scene of war.

Data breach at such an organization can open ways for foreign spies and agents to enter India and cause menace. Such attacks are a threat to national security and must be taken very seriously.

Use NPAV and join us on a mission to secure the cyber world.