"Over the years, DataBreaches has been contacted by many people with requests for help notifying entities of data leaks or breaches. Some of the people who contact this site are cybercriminals, hoping to put pressure on their victims. Others are researchers who are frustrated by their attempts at responsible disclosure. When it's a "blackhat" contacting this site, DataBreaches often responds by seeking more information from them, and may even contact their target to ask for confirmation or a statement about claims that are being made."
"Usually, DataBreaches does not report on the attack or claims at that time, so as not to add to the pressure the entity might be under to pay some extortion. Occasionally, though, depending on the circumstances and the length of time since the alleged breach, this site may report on an attack that an entity has not yet disclosed, especially if personal information is already being leaked."
"Some people have questioned whether I have been too friendly with cybercriminals or a mouthpiece for them. Occasionally, I have even been accused of aiding criminals. I've certainly knowingly aided some criminals who have contacted me over the years if they are trying to do the right thing or turn their lives around. And I've also helped some cybercriminals in ways I cannot reveal here because it involves off-the-record situations. One person recently referred to me as the "threat actor whisperer.""
DataBreaches receives contacts from cybercriminals and researchers seeking help notifying entities of data leaks. Responses to blackhat contacts include requesting more information and sometimes contacting alleged victims for confirmation. Reporting is often withheld to avoid increasing extortion pressure, though leaks involving personal data or prolonged disclosure delay may prompt publication. The site sometimes assists criminals seeking reform and uses conversations to gain insight and reporting leads. Threat actors sometimes lie, and one recent leak involving WIRED and Condé Nast on forums resulted in the site being manipulated. Frustration among researchers arises from blocked responsible disclosure attempts.
Read at DataBreaches.Net
Unable to calculate read time
Collection
[
|
...
]