The European Telecommunications Requirements Institute (ETSI) has disclosed a data breach following a cyberattack on its member’s portal.
Established in 1988, ETSI is an unbiased, not-for-profit group that helps the event and testing of technical requirements within the fields of data and communication, together with applied sciences resembling GSM, 3G, 4G, 5G, and others.
ETSI has over 900 member organizations from 65 nations throughout the globe, together with academia, authorities, analysis entities, non-public organizations, and public our bodies.
Final week, the France-based standardization physique introduced that hackers had breached “the IT system devoted to its members’ work”, stealing the checklist of its on-line members.
“ETSI believes the database containing the checklist of their on-line customers have been exfiltrated,” the group stated in an incident discover on its web site.
ETSI says it has been working with the French Nationwide Cybersecurity Company (ANSSI) to analyze the incident and that the vulnerability that led to the data breach has been mounted.
“Because the assault and below the steering of ANSSI consultants, ETSI has mounted the vulnerability, undertaken further security actions and considerably strengthened its IT security procedures,” ETSI says.
As a precautionary measure, the group has prompted all its on-line customers to reset their passwords, however it’s unclear whether or not person credentials had been saved within the stolen database.
In response to ETSI, a regulation enforcement investigation has been launched and the incident has been reported to the French information safety authority (CNIL) as required by regulation.
“Transparency is on the root of ETSI, in our governance and technical work. We’re very grateful for the information and recommendation of the consultants from the French Nationwide Cybersecurity Company (ANSSI), who’ve helped us to find out the remedial actions to be taken, and to strengthen the security of our techniques,” ETSI Director-Normal Luis Jorge Romero stated.