Anonymous Hacks Booz Allen, Taps 90,000 Military Emails

The hacker group Anonymous says it has stolen some 90,000 military email addresses and password hashes from the management firm Booz Allen Hamilton, a major U.S. defense contractor.

"We infiltrated a server on their network that basically had no security measures in place," according to a message posted on thepiratebay.org. "We were able to run our own application, which turned out to be a shell and began plundering some booty."

In addition to the 90,000 email addresses, "we also added the complete sqldump, compressed ~50mb, for a good measure," the group says. Anonymous also claims to have pulled 4 GB of source code from Booz Allen's Apache SVN software revisioning and version control system and "wiped it from their system."

In addition, Anonymous said it "found maps and keys for various other treasure chests buried on the islands of government agencies, federal contractors, and shady whitehat companies. This material surely will keep our blackhat friends busy for a while."

Booz Allen did not make a statement about the alleged breach, but its Twitter account says, "Part of @BoozAllen security policy, we generally do not comment on specific threats or actions taken against our systems."

Anonymous claims Booz Allen is developing "a military project" to manipulate social networks to influence public opinion. The hacker group said it spent four man-hours hacking into the Booz Allen network.

Industry observers say the attack is a good example of the way that third-party suppliers and contractors could be targeted in an effort to reach a more prominent target, such as the U.S. federal government.

"The federal government in taking all the right steps in protecting its information, but they are under attack from all sides," says Joe Gottlieb, president and CEO of SIEM tool vendor SenSage. "The most challenging is that they have to maintain a trust model that spans across their supplier network. This breach is an example of how that can go sideways."

Have a comment on this story? Please click "Comment" below. If you'd like to contact Dark Reading's editors directly, send us a message.