Hacker collective Play claims cyber attack on city of Antwerp: “Without payment, we unload citizens’ personal data”

20 comments
  1. Translation: idioot klikt op phishing link, onderbetaalde IT nam niet genoeg voorzorgsmaatregelen en nu is alles naar de zak.

  2. Some noteworthy bits for people that don’t have access (or don’t use 12ft.io)

    >The Antwerp city council is given one week to pay the ransom. If that money is not paid by Dec. 19, Play will start publishing personal data. That ranges from passports and driver’s licenses to other financial data. The collective says it has captured as much as 557 gigabytes of data.

    >As a result of the hacking, just about all of the city’s counter services, numerous applications of the city’s education, health care, sports and culture departments have been crippled. Reservation tools can no longer be used. No one can make appointments for passports, container park, sports halls or museums. Birth certificates or death certificates must be prepared and printed via disconnected computers.

    >The city of Antwerp prefers not to communicate about the cyber attack or the threats from hacker collective Play. This morning, the cabinet of Mayor Bart De Wever (N-VA) responded by saying that specialists are working day and night to restore the IT systems.

  3. With the data including passports, birth certificates and driver licenses there is a huge threat of identity theft. People can open bank accounts or start companies with that kind of information, your name could be used for all kinds of criminal activities.

  4. Given Flanders has 300 towns that all have responsibility for their own IT, this can happen 300 times. There aren’t enough cyber security experts in Flanders for 300 organizations. And that’s 300 times some IT guy first has to have the knowledge implement security and then has to convince some political nitwit to be allowed to do it. And doing network and systems monitoring 300 times is just not going to happen, there will be no budget for some “nerd to look at screens”.

    I’d be surprised if any town is really safe. The only real limit is what towns the hackers find worthwhile to go after, Antwerp will look more lucrative than Damme.

    >80% of IT for towns is the same tasks anyway, there is no good excuse to keep individual towns responsible for it.

  5. I live in Antwerp-non European citizen. They have literally 100% of mine and my wife’s data. Jesus Christ I’m pissed, but there will be 0 consequences for this. Antwerp city government is absolute mess. I love my adopted city, but I’m so fed up with the incompetence at the city gov I’m seriously considering leaving when I stop renting. This is just insane.

  6. and there was silly me yesterday, asking stupid questions about being worried for my identity being stolen.

    Turns out “living in Antwerp” was enough.

  7. I’m sceptical of their claims.
    I’d say data leak/theft is far more damaging than encryption of their systems and dataloss.
    If they had data, they would ransom with that first.
    It almost implies that the dataleak happened after/during the encryption.
    If they had actual access/control of internal systems, you’d use that as leverage before nuking/crippling that wide.
    Keeping things out of the media is in the interest of the hacker, the additional PR damage alone is worth extra money/pressure.

  8. Who is this Play group? Can’t really find any info on them (also a hard name to Google).

  9. “Als je niets misdoet, heb je niets te vrezen over wat de overheid met je data doet” – de bootlickers van B1&B2…

  10. The other day I got downvoted for not wanting the police to know where I live. The idiocracy that when I move I gotta prove to a cop that I actually live there by letting them inside my home? Ridiculous.

    And now this? Haven’t we learned that the government knowing too much about you is a bad thing?

  11. Does this attack also include anpr camera records? Shouldn’t be to hard to construct a pattern of the victims travel, aka knowing when he is home or not…

Leave a Reply