Yes it happened last month but the news in mainstream media is out now, as the Anonymous hacker who goes by the handle of Darwinaire claimed to hack the official website of Australian Defence Force Academy [unsw.edu.au/], then stealing and leaking 22,000 student records online.
The CanberraTimes reports that the hacker who breached into the website of Australian Defence Force Academy and took away the personal details of thousands of military personnel used a basic SQL Injection attack against what appeared to be an older database management system.
Darwinare hacker says that he from the United States and a student in the mid-west, he was shocked at the lack of security, saying:
He was ”’very surprised I didn’t get kicked out … So simple, took like three minutes. Literally, like, three f—ing minutes!” he ”hacks for fun”, including raids on university databases in Michigan, Connecticut and Colorado, and the British arm of online bookstore Amazon.
The dump is still accessible to public on an Anonymous-controlled public clipboard. Records contained a mix of student identity numbers, date of birth information, email ids, clear-text passwords and their ranks.
The report also stats that same Darwinaire hacker hacked into many other high profile companies, including breaching of Amazon UK dumping 600 user records online.
[Via: CanberraTimes]
