Hackers reportedly breached Republican campaign committee emails during 2018 elections

Stu Sjouwerman | Dec 4, 2018
 

The National Republican Congressional Committee (NRCC) was hacked during the 2018 midterm elections, according to a report from Politico. Republican officials said that hackers had access to four senior NRCC aides’ email accounts for “several months,” until a security firm discovered the intrusion in April. The NRCC launched an internal investigation and alerted the FBI, but it did not inform any Republican legislators until this week.

“The NRCC can confirm that it was the victim of a cyber intrusion by an unknown entity,” said Ian Prior of Mercury Public Affairs, a PR agency employed by the committee. “Upon learning of the intrusion, the NRCC immediately launched an internal investigation and notified the FBI, which is now investigating the matter.” According to Politico, party officials suspect that a foreign government was responsible for the hack, although they provided very little detail about it. The NRCC ostensibly kept the hack secret from congressional Republicans to avoid compromising the investigation.

This hack mirrors the hacking of Democratic National Committee networks during the 2016 presidential election, alongside other targets like Hillary Clinton’s campaign manager John Podesta. Russian state-sponsored hackers are believed to have carried out those attacks, and special counsel Robert Mueller indicted 12 people in connection with them this summer. But unlike those hacks, hackers haven’t released any of the data from the NRCC breach.

I bet you a 100 bucks they came in using a simple phishing attack. Anybody take me up on that? I thought so. 

Source: The Verge.

https://www.theverge.com/2018/12/4/18125701/nrcc-republican-house-gop-election-committee-email-hack-2018-election


Find out how affordable new-school security awareness training is for your organization. Get a quote now.

 
Get A Quote
Request A Demo
 

Topics: Phishing

Secure the Digital Workforce: Human + AI

KnowBe4 empowers the modern workforce to make smarter security decisions every day. Trusted by more than 70,000 organizations worldwide, KnowBe4 is the pioneer of digital workforce security, securing both AI agents and humans. The KnowBe4 Platform provides attack simulation and training, collaboration security, and agent security powered by AIDA (Artificial Intelligence Defense Agents) and a proprietary Risk Score. The platform leverages 15 years of behavioral data to combat advanced threats including social engineering, prompt injection, and shadow AI. By securing humans and agents, KnowBe4 leads the industry in workforce trust and defense.