CSIDB logo
Incident

Sikh Awareness Foundation

Incident posture

Attack window
Nov 2015
Location
United States of America
Status
Historical
CIA posture
Available to members
Updated
2024-01-02 00:00

Linked entities

Victim
Sikh Awareness Foundation
Threat actors
1 actor
Sources
0 sources

Timeline

Occurred
Nov 2015
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

Eggfather hacks sikhawareness.com and dumps 4,520 usernames and hashed passwords.

Motives

Detailed motive labels are available to members.

0 motives

TTPs

Detailed technique labels are available to members.

1 technique

Description

The attacker was Eggfather, a well-known cybercriminal who has been involved in several high-profile hacking incidents in the past. On November 6th, 2015, he managed to breach the application server of SikhAwareness, a non-profit organization dedicated to promoting awareness about Sikhi and Sikh culture. The attacker used an exfiltration technique to steal sensitive data from the server, including personal information of users who had registered on the website.

The incident was first reported by Siphon, a cybersecurity blog that tracks and analyzes cyber attacks around the world. According to the report, Eggfather gained unauthorized access to SikhAwareness's application server through a vulnerability in the website's security protocols. Once inside, he was able to steal sensitive data such as user names, email addresses, and passwords of users who had registered on the website.

The incident has raised concerns among members of the Sikh community who use the website for various purposes, including learning about their religion and culture, connecting with other members, and accessing resources such as articles, videos, and podcasts. The breach also highlighted the need for organizations to prioritize cybersecurity measures to protect sensitive data from hackers and cybercriminals.

In response to the incident, SikhAwareness took immediate action by changing its security protocols and implementing additional security measures to prevent similar incidents in the future. The organization also informed affected users of the breach and advised them to change their passwords and monitor their accounts for any suspicious activity.

Overall, the cyber incident at SikhAwareness serves as a reminder that no organization is immune to cyber attacks, and it highlights the importance of prioritizing cybersecurity measures to protect sensitive data.

Sources

Sources available to members: 0 sources.

CSIDB