The U.S. Environmental Protection Agency (EPA), a critical government body responsible for safeguarding human health and the environment, is allegedly the latest victim of a significant data breach. Information has surfaced on a forum frequented by cybercriminals, where an individual claims to possess over 100 gigabytes of data purportedly exfiltrated from the agency’s systems. The EPA plays a vital role in developing and enforcing environmental regulations, conducting research, and providing critical information on environmental issues, making any potential breach a matter of serious concern.
The threat actor, whose identity remains undisclosed, advertised the allegedly stolen EPA data for sale, setting a price of 700 USD and indicating a willingness to use an escrow service for the transaction. The compromised information is described as “New Fully fresh” and includes specific data types. The post also included a sample of the data, appearing to be a snippet from a MySQL database dump, referencing internal database and table structures.