Saturday, October 11, 2008

World Bank Victim of Numerous Cyberattacks

Link: http://www.foxnews.com/story/0,2933,435681,00.html

The computer network of the World Bank--"one of the largest repositories of sensitive data about the economies of every nation"--has been the target of an unspecified amount of successful cyberattacks. In fact, recent e-mails from a senior technology advisor state that these cyberattacks have put the World Bank's computer network into an 'unprecedented crisis.'

While the type and amount of stolen information are not yet known--or, at least, have not yet been made public--"sources inside the bank confirm that servers in the institution's highly-restricted treasury unit were deeply penetrated with spy software last April. Invaders also had full access to the rest of the bank's network for nearly a month in June and July."

Memos also indicate that anywhere between eighteen and forty servers have been hacked, including some which contained "scanned images of staff documents" and sensitive information on contract-procurement data.

Beyond such memos and a few announcements by World Bank officials, the World Bank has tried very hard to classify the details of these cyberattakcs. The World Bank has tried especially hard to calm the thousands of employees who are now worried about the security of their personal and professional information.

The identities of the hackers, and the cause of the cyberattacks, are also obscure. According to FOXnews, however, "at least six major intrusions--two of them using the same group of IP addresses originating from China-—have been detected at the World Bank since the summer of 2007."

Since information on these cyberattacks is so limited, I can only recommend that the World Bank discover how hackers gained access to the network and determine how to prevent future intrusions. While the article mentions various attempts by the World Bank to do just that, it is, of course, far easier said than done.

3 comments:

  1. For those of you who have read my post, I also want to direct your attention to the bottom of the source article where you find the World Bank's rebuttal. The World Bank claims that FOXnews' story is "wrong and is riddled with falsehoods and errors." I'll let you make the call on whom to believe.

    ReplyDelete
  2. According to the article, the total cost to maintain the bank's information infrastructure is $280 million per year. What a waste! After the bank sorts out and fixes its immediate problems, it should reevaluate its cost structure. I'm surprised that there is not more information on what makes up the $280 million and on any outrage from World Bank bean counters. My knowledge of exactly what it should cost to protect a lot of sensitive information is limited, but I'm guessing that, from a business standpoint, a $280 million loss is not good for the overall security of the bank.

    ReplyDelete
  3. The bank must save itself. Fox news may have fabricated the story a little but I imagine not that much. The bank needs to spend some of that money they are spending on the infrastructure and put some of that into securing their networks.

    ReplyDelete