Personal information of hundreds of British and EU politicians is available on dark web marketplaces.<\/h2>\n\n\n\n
According to research conducted by Proton and Constella Intelligence, the email addresses and other sensitive information of 918 British MPs, European Parliament members, and French deputies and senators are available in the dark web marketplaces. 40% of 2,280 official government email addresses from the British, European, and French Parliaments were exposed, including passwords, birth dates, and other details.<\/p>\n\n\n\n
Most leaked data email addresses belong to British MPs (68%), followed by EU MEPs (44%). <\/p>\n\n\n
![\"politicians](\"https:\/\/i0.wp.com\/securityaffairs.com\/wp-content\/uploads\/2024\/06\/image-2.png?ssl=1\")
<\/a><\/figure><\/div>\n\n\nThe researchers pointed out that French deputies and senators had the best security, with only 18% of searched emails in cybercrime forums and dark marketplaces.<\/p>\n\n\n\n
Many of these MPs, MEPs, deputies, and senators hold senior positions, including heads of committees, government ministers, and senior opposition leaders. These politicians have access to highly sensitive information, and particularly alarming is that several of them are currently, or have previously been, members of committees tasked with overseeing and enforcing national and international digital strategies.
The presence of the emails on dark web shows that politicians used their official emails to create an account on third-party web services that suffered a data breach.
“The fact that these emails, which are publicly available on government websites, are on the dark web isn\u2019t a security failure by itself. Nor is it evidence of a hack of the British, European, or French parliaments.” reads the report<\/strong><\/a>. “Instead, it shows that politicians used their official email addresses to set up accounts on third-party websites (which were later hacked or suffered a breach), putting themselves and the information they\u2019re entrusted to keep safe needlessly at risk.”\u00a0<\/em>
![\"politicians](\"https:\/\/i0.wp.com\/securityaffairs.com\/wp-content\/uploads\/2024\/06\/image-1.png?ssl=1\")
<\/a><\/figure>\n\n\n\nIt’s a miracle if British MPs were not involved in major scandals due to account takeovers, because 68% of searched email addresses were found on the dark web, including senior figures from both the government and the opposition. MPs\u2019 email addresses were exposed a total of 2,110 times on the dark web, the researchers noticed that the most frequently targeted MP experiencing up to 30 breaches. On average, breached MPs had their details show up in 4.7 breaches. <\/p>\n\n\n\n
The member of the European Parliament experienced fewer breaches compared to their British counterparts, but nearly half of the emails searched were found on the dark web. Out of 309 MEPs exposed, 92 were involved in 10 or more leaks. EU politicians had their email addresses exposed 2,311 times, along with 161 plaintext passwords. This raises concerns, as the European Parliament has increasingly become a target of state-sponsored attacks and acknowledges its lack of preparedness.
Impacted politicians have used their official email addressed to create accounts several sites, including LinkedIn, Adobe, Dropbox, Dailymotion, petition websites, news services, and even, in a small number of cases, dating websites.<\/p>\n\n\n\n
“Even if a hostile takeover of one of these accounts won\u2019t grant an attacker (or foreign government) access to state secrets, it could reveal that politician\u2019s private communications or other sensitive data. Attackers could then use this information to phish or blackmail the politicians.” concludes the report.<\/p>\n\n\n\n
“And this is the best possible scenario. If a breached politician reused a password that was exposed on the dark web on one of their official accounts (and failed to use\u00a0two-factor authentication<\/a>), it could let attackers into government systems.\u00a0“
Follow me on Twitter:\u00a0@securityaffairs<\/strong><\/a>\u00a0and\u00a0Facebook<\/strong><\/a>\u00a0and\u00a0Mastodon<\/a>
Pierluigi Paganini<\/strong><\/a><\/p>\n\n\n\n
(<\/strong>SecurityAffairs<\/strong><\/a>\u00a0\u2013<\/strong>\u00a0hacking,\u00a0dark web)<\/strong><\/p>\n\n\n\n