Ransomware targeting MongoDB databases threatens to report victims for GDPR breach

By Duncan Riley for SiliconANGLE
Friday, July 3, 2020

• 2.2k
• 4
• 4
• 4
• 2
• More
• 4
• 4
• 4

An unknown hacker has targeted 22,900 MongoDB databases in a ransomware attack that threatens to report victims to authorities for breaching the European Union General Data Protection Regulation if they don’t pay up.

Ilia Kolochenko, founder and chief executive officer of web security company ImmuniWeb, thinks governments should create special agencies or law enforcement teams to crawl and monitor the internet for such leaks in their jurisdictions.

“Once detected, legal action should be taken against the company behind the leak and all costs of the monitoring and investigation should likewise be imposed on the guilty company,” he said. “Organizations, on their side, should urgently implement continuous attack surface monitoring and implement a well-though third-party risk management program.” Read Full Article