Quote:
Originally Posted by borked
You are very wrong - the hackers brought down their site and the law firm brought the site back online from a backup - the major FUCKUP, was they brought the site back online with directory listing enabled, leaving the entire tgz tar file of the drive in the web root directory.
It didn't take long at all for someone to see it and download it, extract the qmail directory and seed it to the torrents.
Their server was not hacked at all. They brought this on themselves
This was a fuckup of data protection to the biggest degree.
in other news, full bank details of ACS:Law's clients are readily available in those emails...
|
If the hackers brought the site down, then they were hacked...the issue happened as a result of a hack.
The issue the law firm would have is not encrypting the data. And not all the emails have peoples info on them, some do.
I don't think they'll get fined, they take this court and show malicious activity did it & someone else shared it, thus the hackers are responsible.