\n
![](\"https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2019\/06\/hackerhand1200-796x417.png\")
<\/p>\n [ad_1]
\n<\/p>\n
The US Department of Justice (DOJ) today brought espionage charges against the four Chinese military hackers allegedly responsible for the 2017 Equifax data breach.<\/p>\n
Widely considered one of the largest data breaches in US history, the 2017 attack exposed the personal data of nearly 150 million people. Equifax was fined more than $700 million for its role \u2013 investigators concluded that it was lackadaisical security practices on the part of Equifax employees that allowed China\u2019s spies to infiltrate Equifax\u2018s computer systems.<\/p>\n
According to the indictment, the hackers exploited a security flaw after Equifax failed to update software it\u2019d been warned could give bad actors access.<\/p>\n
Read:\u00a0<\/em>Equifax to pay $700m for breach that exposed 147 million US citizens\u2019 data<\/em><\/p>\n While it remains unclear if or how the Chinese government has used the information gleaned by the hackers, new details on exactly what data was obtained is concerning to say the least.<\/p>\n Per a statement from the DOJ:<\/p>\n The defendants exploited a vulnerability in the Apache Struts Web Framework software used by Equifax\u2019s online dispute portal. They used this access to conduct reconnaissance of Equifax\u2019s online dispute portal and to obtain login credentials that could be used to further navigate Equifax\u2019s network. The defendants spent several weeks running queries to identify Equifax\u2019s database structure and searching for sensitive, personally identifiable information within Equifax\u2019s system.<\/p>\n Once they accessed files of interest, the conspirators then stored the stolen information in temporary output files, compressed and divided the files, and ultimately were able to download and exfiltrate the data from Equifax\u2019s network to computers outside the United States.<\/p>\n In total, the attackers ran approximately 9,000 queries on Equifax\u2019s system, obtaining names, birth dates and social security numbers for nearly half of all American citizens.<\/p>\n<\/blockquote>\n The FBI says it\u2019s committed to bringing cybercriminals to justice \u201cno matter \u2026 what country\u2019s uniform they wear.\u201d This is\u00a0 according to FBI deputy director David Bowditch, who added that the charges represented a \u201cday of reckoning\u201d for digital assailants around the world.<\/p>\n However, it\u2019s unclear exactly what Bowditch or the FBI intend to do about the situation. China isn\u2019t going to hand over four of its military service members and US law enforcement has no way of extraditing, capturing, or arresting them.<\/p>\n Attorney General William Barr, speaking at a news conference announcing the indictments, said the Chinese government could potentially sell the data \u2013 which covers nearly half the population of the US \u2013 and use the proceeds to fund its artificial intelligence research.<\/p>\n Just last month US President Donald Trump signed a trade deal\u00a0with China, indicating that his administration is more concerned with sealing an economic deal with the country than dealing with what AG Barr described as \u201ca deliberate and sweeping intrusion into the private information of the American people.\u201d<\/p>\n The US government doesn\u2019t appear to have an answer for the problems of IP theft and hacking from the Chinese government. AG Barr offered the vague threat that \u201cwe [the US government] remind the Chinese government that we have the capability to remove the internet\u2019s cloak of anonymity and find the hackers that nation repeatedly deploys against us,\u201d and FBI deputy director Bowditch propped up the hope that the four charged hackers would \u201cslip up\u201d and provide US law enforcement with an opportunity to arrest them outside of China.<\/p>\n In the meantime, in the US, the IT departments at Equifax and the hundreds of thousands of other businesses with our sensitive data remain our only line of defense against state-sponsored military hackers from China.<\/p>\n<\/p><\/div>\n\n