[TusharK]

According to a media report, all the data on National Highways Authority of India's (NHAI) servers was lost after last week's ransomware attack.



There could be various reasons that lead to the breach. It is said that weak cybersecurity infrastructure, lax monitoring and outdated legacy software were some of them.

According NHAI officials, while there was a loss of data on the servers and a breach in the hardware, they had a backup loaded on the mail server.

Following this cyber attack, CERTin, which handles computer security emergencies, has started rigorous monitoring. Meanwhile, the investigation to ascertain from where the attack originated is still ongoing.

Source

Link to Team-BHP News

[Reinhard]

Originally Posted by TusharK

According to a media report, all the data on National Highways Authority of India's (NHAI) servers was lost after last week's ransomware attack.

Following this cyber attack, CERTin, which handles computer security emergencies, has started rigorous monitoring. Meanwhile, the investigation to ascertain from where the attack originated is still ongoing.

Ransomware. Good. Someone thought that the IT security teams with NHAI would understand that someone is asking for a ransom. NHAI telling that all the data was "backed up" is another stupid attempt at face-saving. The data obviously is backed up. Deleting the data isn't the primary purpose of such attacks & even trainee security engineers know this. The purpose is to leak data that might also be commercially and strategically sensitive to cause tremendous damage in long term. Who knows what level of own, vendor/partners' data with NHAI was leaked in this.

Do we even need an investigation to know where the attack originated from? Has to be the currently hostile neighbour China or its completely indebted little crony. Quite a coincidence that the attack happened just before India decided to block Chinese companies in road infrastructure related contracts.