Kentucky Unemployment Insurance Site Shuttered After Attack govinfosecurity.com - get the latest breaking news, showbiz & celebrity photos, sport news & rumours, viral videos and top stories from govinfosecurity.com Daily Mail and Mail on Sunday newspapers.
Singtel is among the latest victims of a breach tied to Accellion s File Transfer Appliance.
Two more breaches have been tied to the vulnerable 20-year-old Accellion File Transfer Appliance. The latest victims are Singapore telecom company Singtel and Australian medical research institute QIMR Berghofer.
Singtel reports that it s working closely with the Cyber Security Agency of Singapore after a breach of its Accellion FTA system, which it uses to share information internally and externally.
In a blog post on Thursday, Singtel said it was informed by Accellion that FTA had been attacked by unidentified hackers. We are currently conducting an impact assessment with the utmost urgency to ascertain the nature and extent of data that has been potentially accessed. Customer information may have been compromised, Singtel says.
GovInfoSecurity Twitter Get Permission
New Zealand s Reserve Bank is one victim of a breach involving Accellion s FTA product. (Source: Wikimedia Commons)
Several data breaches stemming from unpatched vulnerabilities in Accellion s File Transfer Appliance have been revealed. What went wrong? Where does the fault lie? And what can organizations do about it?
It’s not a straightforward story, and it points to problems around balancing use of an aging software product with risk, a reluctance to move onto a newer platform and internal patching hiccups.
It’s prudent for those still using Accellion s FTA to wean themselves off of it if possible.
Get Permission
Washington State Auditor Pat McCarthy says her office was not notified about a vulnerability in Accellion s file transfer product.
A data breach of a Washington state auditor s system exposed 1.4 million unemployment claimants’ records. The breach involved exploiting a flaw in Accellion s file transfer product, called File Transfer Appliance, and the state’s auditor says the office was never notified of the vulnerability and that a fix was available, the Seattle Times reports.
Organizations in New Zealand and Australia have also been affected by breaches tied to exploits of the vulnerability. But Accellion says it issued a patch in December 2020 and alerted all affected customers.