ZDNet reported today that multiple Russian government sites have leaked the personal and passport information of over 2.25 million citizens, government employees, and high-ranking politicians. Ivan Begtin, co-founder of Informational Culture, a Russian NGO, has discovered and documented the leaks.
Paul Norris, Senior Systems Engineer, EMEA at Tripwire:
It is paramount that the involved parties take all the necessary steps to mitigate the consequences of this incident, which include changing all their passwords, requesting a new passport and looking out for potential BEC and spear phishing emails that may come through their inbox.
Instances such as this data leak should serve as a reminder that all organisations should take security weaknesses warnings very seriously and should continuously monitor their entire network and infrastructure for potential vulnerabilities, especially when their servers contain such sensitive data.”