Hackers managed to obtain user data from companies such as Apple, Meta and Discord. Intruders impersonated themselves as law enforcement officers, and got access to users’ addresses, phone numbers and IP-adresses.
Companies’ employees sent such information, as users addresses, phone-numbers and IP-adresses. This incident happened because hackers impersonated themselves as law enforcement officers and sent "emergency data requests". It should be noted, that in case with "emergency data requests", no special court statement is required.
It’s still unclear, how many times the data was sent in reply to unverified request. However, overall, from July to December 2020 Apple received 1162 emergency data requests from 29 countries, and sent data in reply to 93% of these requests. Meta received 21700 emergency data requests from January to June 2021 and sent some data in reply to 77% of requests. Snap also received such requests, but it’s also still unclear, if Snap’s employees have sent any data in reply.
Apple representative appealed to the section of enforcement guidelines, which tells, that company is able to get in contact with law enforcement officer, who sent the request, in order to verify it’s compliance with law. In turn, Meta representative Andy Stone declared, that each data request is checked and that company uses special systems in order to detect malversation. Snap’s representative also declared, that company has tools, which can identify fraudulent requests.
At the same time, sources claim that hackers use the received information for harassment and financial fraud. In some cases, hackers’ requests included fake signatures of real officers, while in some other cases hackers used real requests as pattern for fake one.
Earlier, execution of fake request was confirmed by Discord. Despite that account was checked, and it was legal, in the end it turned out that it was compromised by an intruder. Company held an investigation and acknowledged law enforcement that their account had been hacked.
SearchInform uses four types of cookies as described below. You can decide which categories of cookies you wish to accept to improve your experience on our website. To learn more about the cookies we use on our site, please read our Cookie Policy.
Always active. These cookies are essential to our website working effectively.
Cookies does not collect personal information. You can disable the cookie files
record
on the Internet Settings tab in your browser.
These cookies allow SearchInform to provide enhanced functionality and personalization, such as remembering the language you choose to interact with the website.
These cookies enable SearchInform to understand what information is the most valuable to you, so we can improve our services and website.
These cookies are created by other resources to allow our website to embed content from other websites, for example, images, ads, and text.
Please enable Functional Cookies
You have disabled the Functional Cookies.
To complete the form and get in touch with us, you need to enable Functional Cookies.
Otherwise the form cannot be sent to us.
Subscribe to our newsletter and receive a bright and useful tutorial Explaining Information Security in 4 steps!
Subscribe to our newsletter and receive case studies in comics!