SiegedSec group allegedly stole critical data from COI

The SiegedSec cybercriminal group has allegedly hacked the Communities of Interest Cooperation Portal and stolen information. The COI Cooperation Portal is where military alliances share information and collaborate to support NATO-affiliated organisations and nations.

However, the earlier-mentioned hacking group claimed on Telegram that they had successfully stolen hundreds of documents from the NATO-supporting portal.

A cybersecurity researcher analysed the leaked data and discovered it contains about 845 megabytes worth of archives, 8,000 rows of user-related details, unclassified files, and user account access credentials.

 

The SiegedSec hackers have gathered troves of data affecting different user details from NATO-affiliated countries.

 

The confirmed data gathered by the SiegedSec hackers from the portal includes full names, companies, units, working groups, job titles, business email IDs, Residence addresses, and photos.

A security analyst stated that the incident could impact 31 nations of the NATO alliances if the alleged data leak is accurate. As of now, a NATO representative explained that they are currently investigating the hacking group’s claims.

Moreover, their cybersecurity experts have ongoing search operations in the recent claims against the Communities of Interest Cooperation Portal.

The representative also added that they face malicious cyberattacks regularly; hence, NATO and its allies are ready to respond its such events. The spokesperson also explains that they are doing their best to strengthen their ability to detect, respond and prevent such cybercriminal activities.

Earlier this year, this cybercriminal group also claimed a data breach attack on Atlassian and leaked thousands of employee details, including records, phone numbers, email addresses, and names.

However, some researchers claimed that the group is not like a financially motivated threat group since they behave more like a hacktivist organisation.

The proof of these details is that the hackers recently released a statement that they had attacked the COI portal to protest NATO member nations’ attacks on human rights. Furthermore, the hacktivist group explained that their actions have no connection to the current conflict status between Russia and Ukraine since many cybercriminal groups are targeting NATO because of participating in the war.