Skip to main content

Multiple FTP servers owned by the U.S. government were accessed by a teen hacker

exploit
Image used with permission by copyright holder
On Monday, a report surfaced claiming that a teen hacker using the alias “Fear” managed to gain access to hundreds of FTP servers owned by the U.S. government. The hacker initially gained access to one server, but then discovered that it listed the access credentials to all FTP servers residing on the .us and .gov domains. The .us servers include public data, private data, program source code, and more sensitive data, while the hacker wouldn’t say what’s loaded on the .gov sites.

FTP stands for file transfer protocol, and servers using this protocol are established to host files on local networks or via the internet. Users typically need a login name and password to gain access to content stored on these servers, which can be made public or set as private. Naturally, the government would keep its servers private, so it’s a bit scary to see that a teen managed to access one and grab the details of numerous others.

“It was very simple to gain access to the 1st box that listed all the .us domains, and their ftp server logins,” the unnamed hacker claims. “I went through each and every one, it was legit. I am pretty sure about every person who does security researching can do this, yes, it may have taken me about 3 hours or 4 hours of looking around, but it is still possible.”

The hacker also points out that the FTP sites used absolutely no encryption on their contents despite their sensitive nature. He discovered social security numbers, credit card numbers, and even web-based banking transactions made by the First Bank of Ohio. One file contained the postal addresses, email addresses, and phone numbers of candidates for the Minnesota school board as well.

According to the report, the teen hacker managed to grab credit card numbers from the First Bank of Ohio because the government has access to that particular bank. In turn, the bank stores the sensitive numbers across several SQL tables, which is a form of Excel-like data storage within a database. Moreover, one FTP server located within Florida wasn’t even password protected. It reportedly serves up one file with 267 million records, one file with 76 million records, another one with 400 million records, and more. Since then, that specific FTP server has now become password protected (even though that may be a case of closing the barn door after the data-rich cow has gotten out).

Ultimately, the teen managed to collect credit card numbers by the thousands, and social security numbers by the millions. He even grabbed the sensitive details of state employees including their telephone numbers, names, addresses, and government positions. Apparently, the FTP sites owned by the U.S. government depend on passwords with only five characters.

The teen hacker reportedly didn’t leave any backdoors to the FTP servers save for Florida, and that backdoor was removed Sunday night. Still, the whole situation is surprising given these servers are run by the U.S. government and a single teen managed to access them and grab sensitive data.

Just imagine the damage local hackers and international terrorists could deal to Americans by breaking into these servers … if they haven’t already.

After the report went live, the federal government shut down the main .us FTP server. The story is currently ongoing, so stay tuned.

Editors' Recommendations

Kevin Parrish
Former Digital Trends Contributor
Kevin started taking PCs apart in the 90s when Quake was on the way and his PC lacked the required components. Since then…
9 best laptops of 2024: tested and reviewed
The MacBook Air on a white table.

To earn the crown as the best laptop in 2024, a device needs to have it all: gorgeous design, killer performance, a productive keyboard, long-lasting battery life, and much more.

Each of the laptops below has been vetted thoroughly by Digital Trends. Whether it's an affordable Chromebook or a top-of-the-line gaming laptop, they've all been subjected to real-world testing, as well as benchmark and battery tests, to collect enough data to objectively pit them against each other.

Read more
All the ways Intel Macs are still better than Apple Silicon Macs
cheap macbook deals

MacBooks are pretty amazing these days. Thanks to the efficiency of Apple Silicon, you get all-day battery life, as well as the ability to edit videos when unplugged from power. The new MacBook Air with the M3 chip is even good enough for gaming.

All of that is in contrast to the Intel Macs of the past.

Read more
This bundle deal saves you $1,000 on an Alienware PC and monitor
An Alienware Aurora R15 gaming desktop alongside a gaming monitor on a desk.

You don't have to go through gaming PC deals and monitor deals yourself because there are bundles like this one from Dell -- the Alienware Aurora R15 gaming desktop and the Alienware 34-inch curved QD-OLED gaming monitor for a package price of $2,900, which is $1,000 less the original price of $3,900. It's still not cheap, but you'll be getting a top-of-the-line gaming rig with just one purchase. You'll have to hurry with the transaction though, as we're not sure if the bundle will still cost cheaper than usual by tomorrow.

Why you should buy the Alienware Aurora R15 gaming PC and 34-inch curved QD-OLED gaming monitor
It's the Alienware Aurora R16 that sits on top of our list of the best gaming PCs, but its predecessor, the Alienware Aurora R15, remains a worthwhile purchase because of the power that it packs. It's equipped with the AMD Ryzen 9 7900X processor, AMD Radeon RX 7900 graphics card, and 32GB of RAM that's the sweet spot for high-end gamers, according to our guide on how much RAM do you need. These specifications make it more than enough to run the best PC games without any issues. The gaming desktop also features a 1TB SSD for ample storage space, and it comes with Windows 11 Home pre-installed.

Read more