British Museum says ex-contractor 'shut down' IT systems, wreaked havoc
- Reference: 1737970210
- News link: https://www.theregister.co.uk/2025/01/27/contractor_trespass_british_museum/
- Source link:
The freelancer gained entry to an unauthorized area late last week to wreak havoc, the Metropolitan Police confirmed.
A spokesperson for the public museum in central London, which houses eight million works related to human history, art, and culture, told The Register at the weekend: "An IT contractor who was dismissed last week trespassed into the museum and shut down several of our systems. Police attended and he was arrested at the scene.
[1]
"We are working hard to get the museum back to being fully operational but with regret our temporary exhibitions have been closed today (January 25) and will remain so over the weekend – ticket holders have been alerted and refunds offered."
[2]
[3]
We asked the British Museum how the former contractor gained entry, and for further details on the technical tampering that took place. We also asked about the impact it had on visitor numbers, the financial cost, and when normal service will resume.
[4]AI chatbot startup founder, lawyer wife accused of ripping off investors in $60M fraud
[5]North Korean dev who renamed himself 'Bane' accused of IT worker fraud caper
[6]Supply chain attack hits Chrome extensions, could expose millions
[7]Ransomware scum make it personal for Reg readers by impersonating tech support
The spokesperson said they had nothing further to add at this stage.
The Met told us they were called to the institute on January 23 at approximately 2025 UTC to "reports that a man had entered the British Museum and caused damage to the museum's security and IT systems.
"Police swiftly attended and arrested a man in his 50s at the scene on suspicion of burglary and criminal damage. He has been bailed pending further inquiries."
[8]
According to the Association of Leading Visitor Attractions, the British Museum was Britain's most popular attraction last year, up 42 percent since 2022 to more than 5.8 million guests. It houses the Rosetta Stone, the Parthenon Marbles, and the Younger Memnon bust of Ramesses II.
Special exhibitions on at present include Silk Roads, Hew Locke, and Picasso.
The police did not respond to our specific questions about how the former contractor gained access to the museum's IT systems or the damage they caused. ®
Get our [9]Tech Resources
[1] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Z5dnXkx1tDYrMVKhYc5i7QAAAQg&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Z5dnXkx1tDYrMVKhYc5i7QAAAQg&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Z5dnXkx1tDYrMVKhYc5i7QAAAQg&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[4] https://www.theregister.com/2025/01/24/ai_startup_founder_wife_indicted/
[5] https://www.theregister.com/2025/01/24/north_korean_devs_and_their/
[6] https://www.theregister.com/2025/01/22/supply_chain_attack_chrome_extension/
[7] https://www.theregister.com/2025/01/22/ransomware_crews_abuse_microsoft_teams/
[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Z5dnXkx1tDYrMVKhYc5i7QAAAQg&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[9] https://whitepapers.theregister.com/
Re: lax procedures
"So how did they get access to the computer area"
I suspect that there was no security, no badge needed; at most a combination lock, and he knew the combination.
Enquiring minds ...
Re: lax procedures
One of those mechanical entry keypads that's never had the combination changed, and now has four particulary shiny buttons?
Sounds like someone in HR should be fired as well.
I’d be firing who ever heads up their IT Security team that allowed him access after he’d been sacked.
“Suspicion of burglary and criminal damage”. Now the staff at the British Museum know how it feels.
I think they probably [1]already do . There apparently being no honour amongst those who make disputed claims of ownership...
[1] https://www.bbc.com/news/articles/crgy4w221z5o
Silk Roads exhibition
Does it include anything about, er, more recent implementations?
Why yes, the silk one of course please --->
lax procedures
So how did they get access to the computer area.... did they not take away their badge and remove any physical, and computer access?