The British Army’s online recruitment portal and computerized enrollment system was shut down after itn suffered a data breach incident.
The portal was shut down as a precaution after the personal data of more than 100 army recruits including full names, dates of birth, addresses, qualifications and previous employment details was found for sale on the dark web.
The Ministry of Defense launched investigation to know how the cyber cirminals hacked the internal Defense Recruitment System and exfiltrated recruits’ personal data.
Source: https://www.infosecurity-magazine.com/news/data-breach-disrupts-uk-army/
TPRM report: https://scoringcyber.rankiteo.com/company/british-army
"id": "bri185612522",
"linkid": "british-army",
"type": "Breach",
"date": "04/2022",
"severity": "80",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': 100,
'industry': 'Defense',
'location': 'United Kingdom',
'name': 'British Army',
'type': 'Government'}],
'data_breach': {'data_exfiltration': 'Yes',
'number_of_records_exposed': 100,
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Personal Data'},
'description': 'The British Army’s online recruitment portal and computerized '
'enrollment system was shut down after it suffered a data '
'breach incident.',
'impact': {'data_compromised': ['Full names',
'Dates of birth',
'Addresses',
'Qualifications',
'Previous employment details'],
'downtime': ['Online recruitment portal',
'Computerized enrollment system'],
'operational_impact': 'System shutdown',
'systems_affected': ['Online recruitment portal',
'Computerized enrollment system']},
'initial_access_broker': {'data_sold_on_dark_web': 'Yes'},
'investigation_status': 'Ongoing',
'motivation': 'Data Theft',
'response': {'containment_measures': 'System shutdown'},
'title': "British Army's Online Recruitment Portal Data Breach",
'type': 'Data Breach'}