South Carolina Department of Social Services’ Post

NEWS: How I was able to hack the Belgian social welfare and justice system by buying cheap domains 👇: I bought 107 expired domains in total, 32 previously belonging to police zones, 44 belonging to OCMW zones (Public Centre for Social Welfare), 12 belonging to CAW's (General Social Welfare), 12 belonging to CLB (Student Guidance Center) and some others belonging to justice- and health institutions. Immediately, I started receiving confidential e-mails: 📨 Related to the release of detainees, addressed to the police 📨 Cases for public defenders 📨 Insurance claims after accidents as a copy for the police 📨 Payment reminders for people in debt 📨 E-mails related to vulnerable people’s health or social situation 📨 Smartschool updates for the eyes of school workers only I received hundreds of confidential e-mails in merely one week of running this experiment, but also found that these accounts were still linked to at least: 📦 80 professional Dropbox accounts 📦 142 professional Google Drive accounts 📦 57 professional Microsoft/OneDrive accounts accounts Belonging to social welfare and justice workers, some of them full of information (I didn't have to login in order to see this - see blogpost). I hope this can serve as a wake-up call and encourage everyone to 👉 Install 2FA or multifactor authentication on their cloud accounts 👉 Not to upload any sensitive data to cloud storage providers without permission or guidelines of their employer 👉 Better manage expired domain names 👉 Ensure that their address book is up to date Full blogpost: https://lnkd.in/e2yhNVP7

NEWS: How I was able to hack the Belgian social welfare and justice system by buying cheap domains 👇: I bought 107 expired domains in total, 32 previously belonging to police zones, 44 belonging to OCMW zones (Public Centre for Social Welfare), 12 belonging to CAW's (General Social Welfare), 12 belonging to CLB (Student Guidance Center) and some others belonging to justice- and health institutions. Immediately, I started receiving confidential e-mails: 📨 Related to the release of detainees, addressed to the police 📨 Cases for public defenders 📨 Insurance claims after accidents as a copy for the police 📨 Payment reminders for people in debt 📨 E-mails related to vulnerable people’s health or social situation 📨 Smartschool updates for the eyes of school workers only I received hundreds of confidential e-mails in merely one week of running this experiment, but also found that these accounts were still linked to at least: 📦 80 professional Dropbox accounts 📦 142 professional Google Drive accounts 📦 57 professional Microsoft/OneDrive accounts accounts Belonging to social welfare and justice workers, some of them full of information (I didn't have to login in order to see this - see blogpost). I hope this can serve as a wake-up call and encourage everyone to 👉 Install 2FA or multifactor authentication on their cloud accounts 👉 Not to upload any sensitive data to cloud storage providers without permission or guidelines of their employer 👉 Better manage expired domain names 👉 Ensure that their address book is up to date Full blogpost: https://lnkd.in/e2yhNVP7

NEWS: How I was able to hack the Belgian social welfare and justice system by buying cheap domains 👇: I bought 107 expired domains in total, 32 previously belonging to police zones, 44 belonging to OCMW zones (Public Centre for Social Welfare), 12 belonging to CAW's (General Social Welfare), 12 belonging to CLB (Student Guidance Center) and some others belonging to justice- and health institutions. Immediately, I started receiving confidential e-mails: 📨 Related to the release of detainees, addressed to the police 📨 Cases for public defenders 📨 Insurance claims after accidents as a copy for the police 📨 Payment reminders for people in debt 📨 E-mails related to vulnerable people’s health or social situation 📨 Smartschool updates for the eyes of school workers only I received hundreds of confidential e-mails in merely one week of running this experiment, but also found that these accounts were still linked to at least: 📦 80 professional Dropbox accounts 📦 142 professional Google Drive accounts 📦 57 professional Microsoft/OneDrive accounts accounts Belonging to social welfare and justice workers, some of them full of information (I didn't have to login in order to see this - see blogpost). I hope this can serve as a wake-up call and encourage everyone to 👉 Install 2FA or multifactor authentication on their cloud accounts 👉 Not to upload any sensitive data to cloud storage providers without permission or guidelines of their employer 👉 Better manage expired domain names 👉 Ensure that their address book is up to date Full blogpost: https://lnkd.in/e2yhNVP7

NEWS: How I was able to hack the Belgian social welfare and justice system by buying cheap domains 👇: I bought 107 expired domains in total, 32 previously belonging to police zones, 44 belonging to OCMW zones (Public Centre for Social Welfare), 12 belonging to CAW's (General Social Welfare), 12 belonging to CLB (Student Guidance Center) and some others belonging to justice- and health institutions. Immediately, I started receiving confidential e-mails: 📨 Related to the release of detainees, addressed to the police 📨 Cases for public defenders 📨 Insurance claims after accidents as a copy for the police 📨 Payment reminders for people in debt 📨 E-mails related to vulnerable people’s health or social situation 📨 Smartschool updates for the eyes of school workers only I received hundreds of confidential e-mails in merely one week of running this experiment, but also found that these accounts were still linked to at least: 📦 80 professional Dropbox accounts 📦 142 professional Google Drive accounts 📦 57 professional Microsoft/OneDrive accounts accounts Belonging to social welfare and justice workers, some of them full of information (I didn't have to login in order to see this - see blogpost). I hope this can serve as a wake-up call and encourage everyone to 👉 Install 2FA or multifactor authentication on their cloud accounts 👉 Not to upload any sensitive data to cloud storage providers without permission or guidelines of their employer 👉 Better manage expired domain names 👉 Ensure that their address book is up to date Full blogpost: https://lnkd.in/e2yhNVP7

NEWS: How I was able to hack the Belgian social welfare and justice system by buying cheap domains 👇: I bought 107 expired domains in total, 32 previously belonging to police zones, 44 belonging to OCMW zones (Public Centre for Social Welfare), 12 belonging to CAW's (General Social Welfare), 12 belonging to CLB (Student Guidance Center) and some others belonging to justice- and health institutions. Immediately, I started receiving confidential e-mails: 📨 Related to the release of detainees, addressed to the police 📨 Cases for public defenders 📨 Insurance claims after accidents as a copy for the police 📨 Payment reminders for people in debt 📨 E-mails related to vulnerable people’s health or social situation 📨 Smartschool updates for the eyes of school workers only I received hundreds of confidential e-mails in merely one week of running this experiment, but also found that these accounts were still linked to at least: 📦 80 professional Dropbox accounts 📦 142 professional Google Drive accounts 📦 57 professional Microsoft/OneDrive accounts accounts Belonging to social welfare and justice workers, some of them full of information (I didn't have to login in order to see this - see blogpost). I hope this can serve as a wake-up call and encourage everyone to 👉 Install 2FA or multifactor authentication on their cloud accounts 👉 Not to upload any sensitive data to cloud storage providers without permission or guidelines of their employer 👉 Better manage expired domain names 👉 Ensure that their address book is up to date Full blogpost: https://lnkd.in/e2yhNVP7