Government contactor Booz Allen hit by hack

Related Topics

WASHINGTON | Mon Jul 11, 2011 7:50pm EDT

WASHINGTON (Reuters) - Hackers said on Monday they broke into the computer systems of major government contractor Booz Allen Hamilton's.

The hack is similar to network break-ins experienced by such disparate targets as Sony Corp, the U.S. Senate, Arizona police and an FBI affiliate.

The group Anonymous announced the attack via Twitter, saying it is part of a campaign to expose government and corporate failure to secure computer networks.

The hackers said in a message posted on the Internet that they wiped out 4 gigabytes of Booz Allen source code and stole 90,000 email addresses, although they apparently were only able to get encrypted versions of the email passwords.

Booz Allen declined comment, other than to say that "we generally do not comment on specific threats or actions taken against our systems."

Jim Lewis, a cybersecurity expert with the Center for Strategic and International Affairs, was less than impressed with the break-in and said he didn't believe it would hurt them in the long run.

"I'm not sure it's a big deal," he said in email comment. "They say they got lots of email addresses? Sounds like a scavenger hunt more than a hack."

But Anup Ghosh, founder of the Invincea security company, said Booz Allen's clients could have their confidence shaken because of the security breach. "It will hurt Booz Allen. They will now lose potential customers," he said.

And the company's troubles may not be over. The email addresses will be valuable to potential hackers because the owners can be sent spoof emails designed to entice them to click on a link to download malicious software. "Usually five to 20 percent (of recipients) will click if it's a well-crafted email," said Ghosh.

The more serious hacks have been into companies like web search giant Google Inc or a major intrusion into Pentagon networks in 2009. Both were blamed on Chinese entities.

Another rogue group, Lulz Security, broke into U.S. Senate server, brought down the CIA website and struck an Arizona police website last month.

Anonymous became famous late last year for attacking the companies and institutions that oppose WikiLeaks and its founder, Julian Assange.

(Reporting by Diana Bartz; Editing by Bernard Orr)

Related Quotes and News

Company
Price
Related News
We welcome comments that advance the story through relevant opinion, anecdotes, links and data. If you see a comment that you believe is irrelevant or inappropriate, you can flag it to our editors by using the report abuse links. Views expressed in the comments do not represent those of Reuters. For more information on our comment policy, see http://blogs.reuters.com/fulldisclosure/2010/09/27/toward-a-more-thoughtful-conversation-on-stories/
Comments (2)
steveorlando wrote:
From the targets and the information acquired and released indicates it might be a big scam . Designed to stir up fears and pass normally unpassable bill restricting internet access and bypass privacy laws that protect the average person. another HBGary company working their PR magic and not surprisingly Aaron Barr put in his 2 cents worth about the group responsible in previous attacks. A hacker group called the “script kiddies”?? If you understand the term.. It refers to kids with no actual coding talent or computer skills that run pre fab programs from the net..
If you are going to invent a group, why not call it “the marching morons” while you are at it. In the 70′s it was the crooked cop planting a throw away gun to hide his activity and present himself as a hero. Now we have firms like HG Gary yelling duck and cover while leaking irrelevant but alarming information to “justify” their new internet laws. Maybe someone out there can find the smoking gun before the internet becomes another “justified” shooting victim.

Jul 12, 2011 3:29am EDT  --  Report as abuse
dazzlepod.com wrote:
For military personnel to check if your account was leaked, http://dazzlepod.com/boozallen/

Jul 12, 2011 11:29am EDT  --  Report as abuse
This discussion is now closed. We welcome comments on our articles for a limited period after their publication.