American Radio Relay League Confirms Cyberattack Disrupted Operations (bleepingcomputer.com) 32
Roughly 160,000 U.S.-based amateur radio enthusiasts belong to the American Radio Relay League, a nonprofit with 100 full-time and part-time staff members.
Nine days ago it announced "that it suffered a cyberattack that disrupted its network and systems," reports BleepingComputer, "including various online services hosted by the organization." "We are in the process of responding to a serious incident involving access to our network and headquarters-based systems. Several services, such as Logbook of The World and the ARRL Learning Center, are affected," explained ARRL in a press release... [T]he ARRL took steps to allay members' concerns about the security of their data, confirming that they do not store credit card information or collect social security numbers.
However, the organization confirmed that its member database contains some private information, including names, addresses, and call signs. While they do not specifically state email addresses are stored in the database, one is required to become a member of the organization.
"The ARRL has not specifically said that its member database has been accessed by hackers," Security Week points out, "but its statement suggests it's possible."
The site adds that it has also "reached out to ARRL to find out if this was a ransomware attack and whether the attackers made any ransom demand."
Thanks to Slashdot reader AzWa Snowbird for sharing the news.
Nine days ago it announced "that it suffered a cyberattack that disrupted its network and systems," reports BleepingComputer, "including various online services hosted by the organization." "We are in the process of responding to a serious incident involving access to our network and headquarters-based systems. Several services, such as Logbook of The World and the ARRL Learning Center, are affected," explained ARRL in a press release... [T]he ARRL took steps to allay members' concerns about the security of their data, confirming that they do not store credit card information or collect social security numbers.
However, the organization confirmed that its member database contains some private information, including names, addresses, and call signs. While they do not specifically state email addresses are stored in the database, one is required to become a member of the organization.
"The ARRL has not specifically said that its member database has been accessed by hackers," Security Week points out, "but its statement suggests it's possible."
The site adds that it has also "reached out to ARRL to find out if this was a ransomware attack and whether the attackers made any ransom demand."
Thanks to Slashdot reader AzWa Snowbird for sharing the news.
pAy uS oUr rAnSoM or the LOtW gets destroyed (Score:1)
Re: (Score:2, Interesting)
Being an active ham means you're regularly practicing and have the knowledge and materials (i.e. printed manuals) at hand. Few of us rely on the Internet because when we're out in the "bush" for Field Day, chances are that service is going to suck if you have any.
In before the DSTAR nay-sayers...
Re: (Score:1)
Few of us rely on the Internet because when we're out in the "bush" for Field Day, chances are that service is going to suck if you have any.
That was true until ARRL changed the rules to allow for points on communications between two home stations during Field Day.
This was a change made over concerns of people gathering for Field Day operations during the COVID-19 scare, this allowed for points to be gained from home stations contacting other home stations, which in previous events points were only awarded for home stations if contacting a station in the field. This rule appears to still be in effect, but because I'm getting errors trying to vi
Re: (Score:2)
When it was people actually tapping on a telegraph key then it was something separate as a skill set, now it's people with a laptop sending Morse code like any other radio teletype mode. If your use of Morse code relies on a computer then it is a teletype mode.
When was the last time you decoded RTTY or FT8 in your head? It requires a bit more skill to decode CW than to have the computer do everything for you. And before you whine WhAt AbOuT CW DeCoDeRs? They suck, expecially compared to a human who can copy CW under all kinds of conditions.
And if you think CW is dead, get on the bands today and listen for yourself.
73, bpl
Re: (Score:2)
When was the last time you decoded RTTY or FT8 in your head?
When was the last time you received a radio communication without a radio? If something has a need for communications beyond the distance their voice carries then they will use some machine to make that happen. If I'm seeking a device to send and receive such communications then why would I want this device to require me to decode anything in my head?
It requires a bit more skill to decode CW than to have the computer do everything for you. And before you whine WhAt AbOuT CW DeCoDeRs? They suck, expecially compared to a human who can copy CW under all kinds of conditions.
That's just it, because CW decoders suck is why people developed RTTY and FT8. Why would I care if a message was sent by CW, voice, or text? I can see why
Re: (Score:2)
CW is undergoing a massive renaissance. Lots of training material online and the various CW training groups, academies etc are being absolutely snowed with applications to join a course.
The market is full of small QRP CW rigs with waiting lists for delivery.
Re: (Score:1)
CW is undergoing a massive renaissance. Lots of training material online and the various CW training groups, academies etc are being absolutely snowed with applications to join a course.
The market is full of small QRP CW rigs with waiting lists for delivery.
Is that for recreational use or emergency use? If this is recreational then it's not something that belongs in an event for promoting emergency preparedness with a simulation of operating off the grid.
I have seen some radios that use CW and marketed for emergency communications. They use CW because anyone with a Technician license, which is half of licensed ham radio operator in the USA, are restricted to using only CW on some popular shortwave radio bands. This is an old rule that should have been chang
So what? (Score:5, Informative)
From TFA: "However, the organization confirmed that its member database contains some private information, including names, addresses, and call signs."
So what? All of this information is also available in the public FCC database.
Re:So what? (Score:4, Informative)
Came here to say the same thing. My call sign reveals all my personal information on the FCC web site. When you become a HAM your information becomes public. It's just your name and address but it's there.
Re: (Score:2)
News at 11.
Re: (Score:2)
It's possible, if you used a PO Box since day 1, that your address isn't on public file.
Re: (Score:2)
Correct but with a simple Truepeoplesearch, zabasearch, google maps and a few others, with a name, I can find my address, a street view and an aerial view of my house. I can find all of my relative's names and their information also.
Welcome to the internet, where privacy is a thing of the past.
Re: (Score:2)
I don't know how it is in the USA, but elsewhere the government license databases typically display only the call sign and the type of license.
Re: So what? (Score:2)
Is that so? gimme your callsign and let's find out.
Re: (Score:2)
Sure, here's a call sign spotted a few days ago - LZ1SPG. Who's that?
Re: (Score:2)
Well, if you read Bulgarian, it's here:https://lz1pka.com/ham.html
Re: (Score:2)
Yes, and like I said above, there's no data on who they are: https://imgur.com/gM1Rzxz.png [imgur.com]
Re: (Score:2)
You also categorically affirmed "elsewhere". I'm LU, and all of my personal data is public. You're the exception, not the rule.
Re: (Score:2)
So, the takeout is my point stands, and you have to improve on your English reading skills.
Re: (Score:2)
My concern is that the ARRL also had members' credit card information compromised as well. I have heard unconfirmed stories that the ARRL failed to maintain proper backups and is struggling to get its services back online.
Some data may be permanently lost. It doesn't bode well for
Re: (Score:2)
Actually, the more important database would be the contact logs. The ARRL ran the QSL logbook called "Logbook of the world" where you could log your contacts electronically.
That database was hacked, a
Re: (Score:2)
Two things: Where and when did the ARRL confirm this? Nowhere that I can see. It probably did happen, but ARRL hasn't said that definitively yet.
As for addresses, etc. Foreign hams are also members, and all that info combined may not be publicly avaible where they are.
73, bpl
Re: (Score:2)
They have not confirmed it. The notice on their web site is the only official communication.
I agree that it seems likely but BleepingComputer jumped to conclusions with no hard evidence. Then other "news" sites quoted BleepingComputer. I've now seen forum posts saying "a cyberattack has been confirmed by several media outlets".
It's easy to see how fake or unconfirmed news spreads.
Site Looks pretty good to me (Score:2)
I don't know what difference it makes anymore. I got an email from AT&T that says they were breached and the hackers got everything they needed to steal my identity. Paraphrasing a little.
73s de W5MDP
Privacy, not so much (Score:2)
The ARRL meltdown may or may not have compromised private user information. Most of the licensing information is in the public domain. The large Logbook of the World database is valuable, recording millions of QSOs (contacts) between amateurs, but it is not exactly private.
The more interesting data are in-house emails relating to policy and administration. Think salaries and other employee data, Board discussions, strategies, etc. The work of ~100 staffers has been interrupted for a week, as the headq
Re: Privacy, not so much (Score:2)
they probably announced it over radio but no one uses radio anymore.
Re: (Score:2)
Call me old fashioned for using WiFi and a cell phone.
Re: Privacy, not so much (Score:3)
Joke's on them (Score:2)
You can't cyberattack a bunch of boomers with vacuum tube radios!
It has been the logical reply... (Score:2)
Unless they bring back the fun to ham radio, more attacks will follow...