Accurate, Focused Research on Law, Technology and Knowledge Discovery Since 2002

Thwarted cyberattack targeted LC in tandem with October British Library breach

NextGov/FCW:”The Library of Congress was targeted in a cyberattack that occurred in parallel with a high-profile intrusion into the United Kingdom’s British Library in late October, but the hackers failed to access the U.S. library’s systems, according to internal documents obtained by Nextgov/FCW. The attempted breach occurred around Oct. 28, the same day the U.K.’s national library began reporting technical issues on its website. The cybercriminals were unsuccessful because LOC had multifactor authentication — a method that digitally verifies a user logging into a system — enabled at the entry point of the hackers’ incursion. Library IT staff also quickly shuttered targeted services once the attack was detected, the documents said. Since then, LOC has been decommissioning legacy equipment and integrating new security tools into its networks. The October British Library attack was claimed by the Rhysida ransomware gang. The group had pilfered data and held it hostage in exchange for a ransom payment of 20 bitcoin, about £600,000 at the time of the threat. But the library refused to pay, and the hackers published the troves of some 500,000 stolen files, which included employees’ personal information. The cyber offensive was deemed one of the worst in British history by a former leader of the U.K.’s National Cyber Security Centre. The library is still facing service disruptions to date. The FBI and CISA declined to comment. LOC did not respond to multiple requests for comment. It remains unclear whether the same operatives tied to Rhysida had attempted entry into the U.S. library…”

Sorry, comments are closed for this post.