Threat Actor: DDoSecrets | DDoSecrets
Victim: Various individuals and organizations | leaked documents
Price: Free access with a “library card” system for sensitive data
Exfiltrated Data Type: Leaked documents, Personally Identifiable Information (PII)
Key Points :
- DDoSecrets has launched a new public search engine called the Library of Leaks, providing access to millions of leaked documents.
- The initiative aims to restore a public resource for leaked data after their previous search engine was seized by law enforcement.
- The Library of Leaks is supported by collaborations with Flokinet and Investigative Data, along with public donations.
- A new “library card” system is introduced for researchers and journalists to access sensitive data in the Reserved collection.
- Access to the Reserved collection is restricted to protect the privacy of individuals not in public life.
- DDoSecrets is implementing multi-factor authentication to enhance security and prevent data leaks from the Reserved section.
- The organization encourages those unable to afford a subscription to contact them for access, promoting mutual aid.
Distributed Denial of Secrets (DDoSecrets), the non-profit whistleblower organization is celebrating its sixth anniversary with the launch of a new public search engine: the Library of Leaks. This searchable database grants access to millions of documents from dozens of leaks, with more being added daily.
This initiative marks a return to DDoSecrets’ original goal of providing a public resource for leaked data after their first search engine, the Hunter Memorial Library, was seized by German police in 2020 at the behest of U.S. law enforcement. As DDoSecrets states in their press release, “The goal has always been to restore a leaks search engine as a public utility.”
The Library of Leaks is made possible through collaborations with Flokinet and Investigative Data, as well as public donations. However, DDoSecrets is also introducing a new “library card” system for researchers and journalists who require access to their Reserved collection. This section contains sensitive data with Personally Identifiable Information (PII), requiring more stringent access controls.
“Data in this section is restricted to protect the privacy of individuals who are not related to public life,” explains the DDoSecrets press release. Access to the Reserved collection will continue to be vetted, ensuring researchers and journalists demonstrate a commitment to protecting individual privacy.
To further enhance security, DDoSecrets is implementing a physical access device for multi-factor authentication. This “library card” is a response to recent security incidents, including “leaks of data from the Reserved section.” DDoSecrets emphasizes the importance of these measures, stating that such incidents “can endanger our sources and the public.”
The organization aims to make this new system accessible to all who need it. “If a possible partner publication or academic research lab is unable to afford a subscription, please contact us,” they urge. “We want more people to join the library in the spirit of mutual aid.”
Related Posts:
Original Source: https://securityonline.info/ddosecrets-unveils-massive-library-of-leaks-search-engine-with-millions-of-leaked-documents/