Mormon Church IT ransacked, data stolen by 'state-sponsored' cyber-thieves
(2022/10/14)
- Reference: 1665709460
- News link: https://www.theregister.co.uk/2022/10/14/mormon_church_hacked/
- Source link:
Miscreants broke into the Church of Jesus Christ of Latter-day Saints' computer systems and stole personal data belonging to "some" members, employees, contractors and friends, the church has confirmed.
According to a church [1]statement on the "data incident," posted on its website today, the security breach happened in late March 2022. The breached systems contained LDS church members' basic contact info, but did not include banking history or other financial information associated with donations, we're told.
Depending on what personal information church members and others provided when they were hired or created an account, includes data such as usernames, membership record numbers, full names, gender, email addresses, birth dates, mailing addresses, phone numbers and preferred languages, according to the statement.
[2]
Also according to the church, citing federal law enforcement authorities, the break-in was part of a large-scale, state-sponsored scheme targeting organizations and governments worldwide, but "not intended to cause harm to individuals."
[3]
[4]
The Mormons, or LDS as thy prefer to be known, have been working with US authorities and third-party cybersecurity firms since discovering the digital break-in to determine its scope, how it happened, and to mitigate any impacts, the church added. "Law enforcement authorities believe the risk that the information will be used to harm individuals is low and our monitoring efforts have not identified any attempts of harmful use."
As to why the seven-month delay in sharing information about the cybersecurity incident: blame it on the authorities, not the elders.
[5]
"At the request of these law enforcement authorities, we have not shared information about the incident as they have conducted their investigation until October 12, 2022," according to the LDS statement.
The church has since notified everyone who may have been affected, and pledged to work with law enforcement and infosec professionals to "further enhance the security" of its computer systems.
[6]Insurer Medibank hit by targeted cyberattack
[7]Hospital giant's IT still poorly a week after suspected ransomware infection
[8]Pro-Putin goons claim responsibility for blowing US airport websites offline
[9]Lloyd's of London cuts off network after dodgy activity detected
Meanwhile, in how not to write a security-incident-disclosure-press-release news, CommonSpirit Health — America's second-largest nonprofit hospital network — [10]finally admitted its mystery cyberattack was, in fact, a ransomware infection.
It still hasn't provided details about the scope of the attack or what data was stolen.
The admission, posted yesterday in an update on the org's website, came [11]more than a week after the intrusion shuttered electronic health record systems across some of its more than 1,000 medical facilities.
[12]
The digital outages have also reportedly hampered hospital staffs' abilities to prescribe and administer medication to patients.
In at least one instance, a three-year old was accidentally administered a [13]massive dose of painkillers twice the correct amount based on the child's age and size. Luckily, the toddler spit out the meds. ®
Get our [14]Tech Resources
[1] https://newsroom.churchofjesuschrist.org/article/data-incident#2
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Y0je36dUjYSNl@NOT8KjbAAAAJc&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y0je36dUjYSNl@NOT8KjbAAAAJc&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Y0je36dUjYSNl@NOT8KjbAAAAJc&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y0je36dUjYSNl@NOT8KjbAAAAJc&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[6] https://www.theregister.com/2022/10/13/mediabank_private_latest_aussie_business/
[7] https://www.theregister.com/2022/10/12/hospital_outages_ransomware/
[8] https://www.theregister.com/2022/10/10/ddos_us_airport_websites/
[9] https://www.theregister.com/2022/10/07/lloyds_london_security_incident/
[10] https://www.theregister.com/2022/10/12/hospital_outages_ransomware/
[11] https://www.theregister.com/2022/10/06/commonspirit_health_cyberattack/
[12] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Y0je36dUjYSNl@NOT8KjbAAAAJc&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[13] https://www.govinfosecurity.com/commonspirits-ransomware-incident-taking-toll-on-patients-a-20259
[14] https://whitepapers.theregister.com/
According to a church [1]statement on the "data incident," posted on its website today, the security breach happened in late March 2022. The breached systems contained LDS church members' basic contact info, but did not include banking history or other financial information associated with donations, we're told.
Depending on what personal information church members and others provided when they were hired or created an account, includes data such as usernames, membership record numbers, full names, gender, email addresses, birth dates, mailing addresses, phone numbers and preferred languages, according to the statement.
[2]
Also according to the church, citing federal law enforcement authorities, the break-in was part of a large-scale, state-sponsored scheme targeting organizations and governments worldwide, but "not intended to cause harm to individuals."
[3]
[4]
The Mormons, or LDS as thy prefer to be known, have been working with US authorities and third-party cybersecurity firms since discovering the digital break-in to determine its scope, how it happened, and to mitigate any impacts, the church added. "Law enforcement authorities believe the risk that the information will be used to harm individuals is low and our monitoring efforts have not identified any attempts of harmful use."
As to why the seven-month delay in sharing information about the cybersecurity incident: blame it on the authorities, not the elders.
[5]
"At the request of these law enforcement authorities, we have not shared information about the incident as they have conducted their investigation until October 12, 2022," according to the LDS statement.
The church has since notified everyone who may have been affected, and pledged to work with law enforcement and infosec professionals to "further enhance the security" of its computer systems.
[6]Insurer Medibank hit by targeted cyberattack
[7]Hospital giant's IT still poorly a week after suspected ransomware infection
[8]Pro-Putin goons claim responsibility for blowing US airport websites offline
[9]Lloyd's of London cuts off network after dodgy activity detected
Meanwhile, in how not to write a security-incident-disclosure-press-release news, CommonSpirit Health — America's second-largest nonprofit hospital network — [10]finally admitted its mystery cyberattack was, in fact, a ransomware infection.
It still hasn't provided details about the scope of the attack or what data was stolen.
The admission, posted yesterday in an update on the org's website, came [11]more than a week after the intrusion shuttered electronic health record systems across some of its more than 1,000 medical facilities.
[12]
The digital outages have also reportedly hampered hospital staffs' abilities to prescribe and administer medication to patients.
In at least one instance, a three-year old was accidentally administered a [13]massive dose of painkillers twice the correct amount based on the child's age and size. Luckily, the toddler spit out the meds. ®
Get our [14]Tech Resources
[1] https://newsroom.churchofjesuschrist.org/article/data-incident#2
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Y0je36dUjYSNl@NOT8KjbAAAAJc&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y0je36dUjYSNl@NOT8KjbAAAAJc&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Y0je36dUjYSNl@NOT8KjbAAAAJc&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y0je36dUjYSNl@NOT8KjbAAAAJc&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[6] https://www.theregister.com/2022/10/13/mediabank_private_latest_aussie_business/
[7] https://www.theregister.com/2022/10/12/hospital_outages_ransomware/
[8] https://www.theregister.com/2022/10/10/ddos_us_airport_websites/
[9] https://www.theregister.com/2022/10/07/lloyds_london_security_incident/
[10] https://www.theregister.com/2022/10/12/hospital_outages_ransomware/
[11] https://www.theregister.com/2022/10/06/commonspirit_health_cyberattack/
[12] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Y0je36dUjYSNl@NOT8KjbAAAAJc&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[13] https://www.govinfosecurity.com/commonspirits-ransomware-incident-taking-toll-on-patients-a-20259
[14] https://whitepapers.theregister.com/
ancestry.com
Michael Hoffmann
I have never in my life had any association with or interest in the Mornons. I've never contacted them, I've never even had some bright-eyed kids roll up here to talk to me about that Jewish carpenter dude. (they'd be eaten by dropbears before they made it 200 meters out of our nearest town).
Consider my surprise when this morning I wake up to an email from the LDS telling me about the break-in, that no of course nothing serious has been compromised, it's fine, all fine, etc etc etc.
Did some weirdo relative join them and try to save my soul be enrolling me ahead of my demise? With my email address which they assume would remain the same in the Great Winery in the sky (because that's where *I'm* goin' !)
Then it occurred to me: some years back I had done research into my family tree (getting as far back as late 1700s, I'm happy to say!). And yes, I ended up using ancestry.com, which still is the one that has the most data and search capabilities.
Guess who owns them? I knew they were LDS owned, but that would simply skim off my info into their great big post-mortem converts database was a bit of a shock.
No, magic underwear does not come with malware protection.