Read the full story on Backfire News
Personal Info Stolen During NASCAR Ransomware Attack
Back in April of this year, we covered how NASCAR was the target of a ransomware attack by the criminal group Medusa. After the group claimed to have infiltrated the motorsport company’s system, downloading over a terabyte of sensitive data, the whole issue just seemed to go away, until now.
This old, overgrown junkyard contains some neat muscle cars.
Months later, NASCAR is finally acknowledging the hack and theft of data from its servers. According to Hackread.com, which broke the original story, the racing organization said an unspecified number of individuals had their social security numbers and names exposed on the dark web by Medusa.
But Hackread.com says the data leak is much bigger and the sensitive information put out is even more concerning. Among the info dumped onto the dark web by Medusa is reportedly detailed maps of different racetracks, including areas where the public isn’t allowed, employee credentials, email addresses, job titles, and other details someone with bad intentions could use for all kinds of ill.
Obviously, NASCAR has been able to operate without known issues since the data breach. It reportedly hired a security firm once the ransomware attack happened and so we’re sure steps have been taken to mitigate risks associated with the leaked info.
Medusa originally demanded $4 million from NASCAR with the threat that if payment wasn’t made, it would leak all the info it stole onto the dark web. Apparently, NASCAR didn’t play ball and the leak happened.
To help those private individuals who have been affected by the leak, NASCAR has offered one year of credit monitoring services from Experian. That’s really a small gesture considering problems could persist for years to come.
Hopefully there isn’t further fallout for NASCAR from the data breach.
Image via NASCAR
