2022 taz — subscriber data via weak password
Data compromised
Emails, addresses, names
Technical writeup
Attackers guessed weak password on subscriber management account. Downloaded emails, addresses, names. 700+ IPs. Notified Berlin DPA.
Root cause
Weak password; dictionary attack