US Fed Reserve confirms hack

The Federal Reserve has confirmed the hack in which the personal information of 4000 bank executives was compromised.

A since-fixed website software vulnerability was exploited in the hack, the agency told Reuters.

The agency kept mum on what internal site or application was popped.

An internal message sent from the agency to its Emergency Communication System and obtained  by Reuters confirmed mailing addresses, business and mobile phone numbers, business emails and fax numbers were compromised but not passwords.

The dump included the personal data of financial institution employees – including CEOs, presidents, CFOs, IT management, loan officers and secretaries.

Data alleged to be the first and last names of employees was posted online, along with individuals' addresses, titles, names of their financial institution, email addresses, IP addresses, login IDs and hashed passwords.

On Sunday, Anonymous tweeted about the incident, plainly stating that the data came from the agency, the country's central bank.

The data was posted on the website of the Alabama Criminal Justice Information Center (ACJIC), a clearinghouse of criminal records and statistics for the state. The page on ACJIC's site has since been removed.

“Now we have your attention America,” the Sunday tweet from Anonymous read. “Anonymous's Super Bowl commercial, 4k banker dox via the Fed.”

This article originally appeared at scmagazineus.com