EU's financial regulator hit by Microsoft email hack, takes down email system as 'precautionary measure'
The European Banking Authority, a key EU financial regulator, says it has fallen victim to a hack of its Microsoft email system which the US company blames on a Chinese group.
Microsoft said last week that a state-sponsored group operating out of China was exploiting previously unknown security flaws in its Exchange email services to steal data from business and government users, believed to number in the tens of thousands so far.
The "Hafnium" group was a "highly skilled and sophisticated actor," it said.
Hafnium has previously targeted US-based companies including infectious disease researchers, law firms, universities, defence contractors, think-tanks and NGOs, it added.
In a statement issued late Sunday, the EBA confirmed the attack on its email systems which it had decided to take offline "as a precautionary measure."
"The Agency has swiftly launched a full investigation, in close cooperation with its ICT provider, a team of forensic experts and other relevant entities," it said.
The EBA warned that as a result of the attack, personal data could have been accessed and it would provide advice on possible mitigation measures if necessary.
Microsoft executive Tom Burt said last Tuesday that the company provided updates to fix the security flaws and urged customers to apply them.
"We know that many nation-state actors and criminal groups will move quickly to take advantage of any unpatched systems," he added.
Beijing typically rejects US hacking charges out of hand and last year berated Washington following allegations that Chinese hackers were attempting to steal coronavirus research.
In January, the US said Russia was probably behind the massive SolarWinds hack that hit large swathes of the government and private sectors, and which experts say may constitute an ongoing threat.
Microsoft said Tuesday the Hafnium attacks "were in no way connected to the separate SolarWinds-related attacks."
With the milder but more contagious Omicron subvariant BA.5 spreading across the continent, the 53 countries in the WHO European region are currently registering just under 500,000 cases daily, according to the organisation's data. That is up from around 150,000 cases daily at the end of May. Austria, Cyprus, France, Germany, Greece, Luxembourg and Portugal were the countries with the highest incidence rates, with almost all countries in the region seeing a rise in cases.
China's embassy in New Zealand rebuked New Zealand Prime Minister Jacinda Ardern for comments she made at the NATO summit about Chinese assertiveness, calling them "misguided" and "wrong". Ardern said on Wednesday in Madrid that China has "in recent times also become more assertive and more willing to challenge international rules and norms." New Zealand, which is heavily reliant on China for trade, has often shied away from direct criticism of Beijing.
Quicked is empty for story with id 101656633439621
Judges in Florida and Kentucky on Thursday moved to block those states from enforcing bans or restrictions on abortion after the U.S. Supreme Court last week overturned the 1973 Roe v. Wade decision that had established a nationwide right to it. In Kentucky, Jefferson County Circuit Judge Mitch Perry issued a temporary restraining order to prevent the state from enforcing a ban passed in 2019 and triggered by the Supreme Court's decision.
Quicked is empty for story with id 101656607431062