Human Rights Foundation Website Hacked, Thousands of Accounts Exposed

The Hungarian Human Rights Foundation website was hacked a few minutes ago by Kapustkiy and CyberZeist, who managed to get access to over 20,000 accounts and personal information, including phone numbers and home addresses.

Security pentester Kapustkiy told us that the data breach was possible with a SQL injection, which provided him with access to databases that included thousands of accounts, including some that are related to the US government (using the @state.gov suffix).

Just as usual, Kapustkiy decided to leak only part of the accounts and give IT administrators more time to fix the flaw.

In a private conversation a few minutes ago, he told us that he already contacted them to report the flaw and the security team said it would investigate the breach, but for the moment, the website still appears to be up and running.

It goes without saying that the breach is critical for the Hungarian Human Rights Foundation webs...