The hacker was able to compromise a voice mail system within the agency's offices in Maryland.
The compromised line was then used to place some 400 long-distance calls, according to reports.
A FEMA spokesperson told Associated Press that the calls were made to a number of countries in the Middle East and Asia, including India, Yemen, Afghanistan and Saudi Arabia.
The hack was later discovered by Sprint, which then blocked outgoing calls from the number.
The security shortcoming was traced back to a known flaw in the voicemail system which had even sparked a bulletin from the Department of Homeland Security in 2003.
A fix for the hole has been available for several years, but the vulnerability was left open when a contractor installed an upgrade to the system.
FEMA said that the hole has since been fixed.
Hacker runs up US$12,000 Federal phone bill
A hacker who compromised phone systems for the US Federal Emergency Management Agency (FEMA) left the government with a US$12,000 phone bill..
Got a news tip for our journalists? Share it with us anonymously here.
SPONSORED RESOURCES
Rethinking Ransomware Recovery: Closing the Detection and Recovery Gap in Asia Pacific
Strategies to Counter the Ransomware Threat in APJ
Craft your ideal hybrid multicloud strategy
Secure your AI future with generative AI defense
See how F5 protects modern applications against evolving threats
Cloud Resilience Summit
iTnews Benchmark Security Awards 2026
iTnews State of Security Breakfast Sydney
iTnews Executive Retreat - Security Leaders Edition - VIC



