MPs will be told of a massive data breach involving the Ministry of Defence later today, targeting service personnel.

The Chinese state has hacked the Ministry of Defence, Sky News understands.

MPs will be told today of a massive data breach involving the MoD, targeting service personnel.

The government will not name the country involved, but Sky News understands this to be China.

The Chinese state is to be accused of two or three attempts at hacking MoD employees - including personnel.

The cyberattack was on a payroll system with current service personnel and some veterans. It is largely names and bank details that have been exposed.

  • @tal
    link
    English
    113 days ago

    The cyberattack was on a payroll system with current service personnel and some veterans. It is largely names and bank details that have been exposed.

    I mean, that’s not ideal, but as information goes, that seems kind of limited. Bank data is maybe useful for someone trying to steal money, but I don’t see as how Chinese intelligence would benefit that much.

    Maybe they could confirm that someone was working for the British military or something, like if they were working secretly for military intelligence? I don’t know if that’s something that the UK does.

    • Flying SquidM
      link
      fedilink
      English
      513 days ago

      I could see it as being a way to find people that could be bribed.

      If your bank balance is in the negative and you work for the MoD, that’s a great way for China to get you to spy for them.

      • @tal
        link
        English
        1
        edit-2
        12 days ago

        If your bank balance is in the negative and you work for the MoD

        Knowing their financial situation could buy them useful information, true.

        So, I’m going off the US here, but I don’t think that just knowing a bank account number is sufficient to let you see what’s in it. And I don’t believe that a normal bank account will let you run a negative balance, absent something like bank fees. Like, it’s not a credit card. You can get a credit card from a bank, but then knowing a bank account number won’t let you know the balance on the credit card.

        considers

        Security on checking accounts is pretty horrendous. I guess if an employer is moving money into a direct-deposit bank account, if that account is a checking account, you could forge a check for a given amount and see whether it goes through, and then do a transfer back the other direction, and if it bounces, transfer an amount sufficient to cover the “bad check” fee. However, if you’re forging checks en masse I think that banks – not to mention account holders – are liable to notice.

        Like, what they’re getting is what someone’s employer has. The employer doesn’t normally get to know someone’s financial situation.