2021 Russian Railways — 700K employees, 1.3M passengers
Data compromised
Employee and passenger personal data
Technical writeup
Within 18 months: 700K employee records and 1.3M passenger records leaked. Hacker LMonoceros accessed network via unprotected router; 20K+ unsecured devices. Sapsan train Wi-Fi hacked in 20 min.
Root cause
Misconfiguration; default router credentials