Hungarian Government Email Credentials Exposed Due to Weak Passwords

Severity: Medium (Score: 54.0)

Sources: Csoonline, Theregister

Summary

An investigation by Bellingcat has revealed that nearly 800 email and password combinations from Hungarian government accounts are circulating in breach dumps, affecting 12 out of 13 government departments. The compromised credentials include those tied to national security roles, such as defense and counter-terrorism officials. The breaches stem from poor password hygiene, with many officials using weak passwords like 'FrankLampard' and '123456aA'. The data leaks trace back to a spike in 2021, with ongoing exposure into 2026, indicating both old and potentially new compromises. This situation raises significant concerns about the government's cybersecurity practices, especially ahead of the upcoming elections. The findings highlight the need for improved password management and security awareness among government employees. Key Points: • Nearly 800 Hungarian government email credentials exposed due to weak password practices. • The breaches affect 12 out of 13 government departments, including national security roles. • Poor password hygiene is the primary cause, with many officials using easily guessable passwords.

Key Entities

• Data Breach (attack_type)
• Hungarian Government (company)
• NATO (company)
• Hungary (country)
• Government (industry)