iiNet

Internet provider iiNet suffered a data security breach that compromised the passwords of more than 30,000 customers.

The anonymous hacker sold the database of Westnet, a WA-based internet service provider that was acquired by iiNet in 2008 on the dark web.

The data included customer username, address, telephone, and, in some cases, password information of Aussies biggest Internet service provider.

Source: https://www.smh.com.au/technology/more-than-30000-iinet-customer-passwords-hacked-20150609-ghjmo2.html

TPRM report: https://scoringcyber.rankiteo.com/company/iinet

"id": "iin161522",
"linkid": "iinet",
"type": "Breach",
"date": "06/2015",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of a geographical region"

{'affected_entities': [{'customers_affected': '30,000',
                        'industry': 'Telecommunications',
                        'location': 'Australia',
                        'name': 'iiNet',
                        'type': 'Internet Service Provider'}],
 'attack_vector': 'Dark Web Data Sale',
 'data_breach': {'data_exfiltration': True,
                 'number_of_records_exposed': '30,000',
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Customer Username',
                                              'Address',
                                              'Telephone',
                                              'Password Information']},
 'description': 'Internet provider iiNet suffered a data security breach that '
                'compromised the passwords of more than 30,000 customers. The '
                'anonymous hacker sold the database of Westnet, a WA-based '
                'internet service provider that was acquired by iiNet in 2008, '
                'on the dark web. The data included customer username, '
                'address, telephone, and, in some cases, password information '
                'of Aussies biggest Internet service provider.',
 'impact': {'data_compromised': ['Customer Username',
                                 'Address',
                                 'Telephone',
                                 'Password Information']},
 'initial_access_broker': {'data_sold_on_dark_web': True},
 'motivation': 'Financial Gain',
 'threat_actor': 'Anonymous Hacker',
 'title': 'iiNet Data Security Breach',
 'type': 'Data Breach'}