Re: Prosecutor resigns over hacked PC

[InfoSec News <isn () c4i org>]

Forwarded from: Jan Meijer <jan.meijer () surfnet nl>

Hi,

Couple of small clarifications:

On Thu, 14 Oct 2004, InfoSec News wrote:

> http://www.theregister.co.uk/2004/10/13/dutch_prosecutor_hacked/
>
> By Jan Libbenga
> 13th October 2004
>
> A leading Dutch prosecuter resigned yesterday after hackers entered
> his mail box and revealed yet another classified letter addressed to
> the public prosecutor's office.
>
> This was the second security lapse in recent days for Joost Tonino,
> a specialist prosecutor in white collar crime. Just last week Tonino
> was left red faced after it emerged he had put his old PC out with
> the trash. The hard disk, which should have been destroyed,
> contained hundreds of pages of confidential information about high
> profile cases, as well as his credit card number, social security
> number and personal tax files.

A social security number in .nl doesn't get you as much profit as I
believe it does in .us.

> A taxi driver who discovered the PC decided to sell the information
> to a Dutch TV crime reporter, who last week revealed on Dutch
> television what was on the hard disk. The reporter also managed to
> open his email

It's nicer then that.  The taxi driver tried to sell it to the local
Amsterdam TV station AT5.  The chief editor of the local news program
refused it.  Rumour goes this was because his wife holds a position
(what I forgot :( at the same court Tonino worked.

After he saw there was no money in it the taxi driver went to the
crime reporter.  The other editors at the local TV station now want
their chief to leave.....

> box. Although Tonino changed his password immediately after this
> painful incident, Dutch hackers were able to get access his mail box
> and published yet another letter by Tonino on a Dutch weblog. In
> this letter Tonino downplayed the importance of the information
> found on his PC, claiming "it was material of little importance".

His email-account was hacked.  Which is illegal.  And will be
prosecuted.  One still wonders why a prosecutor has a private email
account that is easy to hack according to the kiddies, why proper
security measures were not used on his home PC and why he uses his
private emailaccount for work related matters (one can guess, this is
probably due to prohibitive security measures at his workaccount
preventing him from being productive....).

Jan

-- 
http://www.surfnet.nl/organisatie/jame



_________________________________________
Open Source Vulnerability Database (OSVDB) Everything is Vulnerable - http://www.osvdb.org/