Twelve Years Of Password1 Mastery

An unmanaged test account running 'Password1' for twelve years finally gifted attackers access to Welsh systems. Why do we even bother setting policy?

Source: Information Commissioner's Office (ICO)

The Full Story

Severity: High Mood: Ridiculous

Here we go again, as Ogi Networks Limited and Data Cymru proved that a twelve-year-old test account with 'Password1' remains peak defensive tradecraft. This predictable blunder handed attackers 182.7GB of encrypted data and 42GB of exfiltrated records, delightfully compromising 3,300 individuals, mostly children relying on family support projects. To protect ourselves from this magnificent farce, one might radically consider auditing prehistoric accounts and retiring toddler-level passwords before the ICO issues another inevitable, weary reprimand.

#JustAnotherDay #Password1Fail

Open article →