Hacktivist collective Nameless claims to have obtained gigabytes of information from Epik, which gives area title, internet hosting, and DNS companies for a wide range of shoppers. These embrace the Texas GOP, Gab, Parler, and 8chan, amongst different right-wing websites. The stolen knowledge has been launched as a torrent. The hacktivist collective says that the information set, which is over 180GB in dimension, incorporates a “decade’s price of information from the corporate.”
Nameless says the information set is “all that is wanted to hint precise possession and administration of the fascist aspect of the Web that has eluded researchers, activists, and, nicely, nearly everyone.” If this info is appropriate, Epik’s clients’ knowledge and identities might now fall into the palms of activists, researchers, and nearly anybody curious sufficient to take a peek.
Many years of Epik stuff, now in a torrent close to you
Epik is a site registrar and net companies supplier identified to serve right-wing shoppers, a few of which have been turned down by extra mainstream IT suppliers as a result of objectionable and typically illicit content material hosted by the shoppers.
Nameless’ actions started with what the group calls “Operation Jane” after the Texas Heartbeat Act was signed into regulation this month. The restrictive abortion regulation permits personal people, not essentially authorities our bodies or the police, to implement the six-week abortion ban. In line with the act, any Texas resident can carry a civil lawsuit towards any one who performs or helps to facilitate an unlawful abortion—and declare not less than $10,000 in damages.
Among the many knowledge set are numerous SQL databases containing what seem like buyer data related to each area title hosted by Epik. Ars analyzed a small subset of the leaked knowledge set, together with what a supply calls an Epik worker’s mailbox, which incorporates correspondence from Epik CEO Rob Monster.
Members of one other hacktivist group, Distributed Denial of Secrets and techniques, have additionally made the information set available by way of alternate means for these unable to make use of torrents.
“We’re not conscious of any breach. We take the safety of our shoppers’ knowledge extraordinarily severely, and we’re investigating the allegation,” an Epik consultant advised Ars.
Hackers alter Epik’s data base to mock firm’s response
Nameless additionally tampered with Epik’s data base to mock the corporate’s denial of the breach.
“On September 13, 2021, a bunch of youngsters calling themselves ‘Nameless’, whom we’ve by no means heard of, mentioned they handle[d] to come up with, nicely, truthfully, all our knowledge, after which launched it,” mentioned the altered data base, as seen in an archived copy. “They declare it included all of the person knowledge. All of it. All usernames, passwords, e-mails, help queries, breaching all anonymization service[s] we’ve got. In fact it’s not true. We’re not so silly we might enable that to occur.”
The knowledge-base web page ends by sarcastically saying, “We did write this ourselves, that is clearly not a part of the hacked account.” Epik has since eliminated the web page.
Previous to this incident, Nameless defaced the Texas GOP web site by changing references to “Assist Texas Keep Crimson” with “Texas: Taking Voices from Girls to advertise theocratic erosion of church/state obstacles.” The group additionally added “donate” hyperlinks to reproductive well being care nonprofit Deliberate Parenthood.