President Barack Obama said on Tuesday that US authorities are investigating whether hackers unearthed and posted online financial information that belongs to first lady Michelle Obama and a variety of celebrities like Beyonc'e and Jay-Z.
"We should not be surprised that if we've got hackers that want to dig in and have a lot of resources, that they can access this information," Obama told ABC News. "Again, not sure how accurate but ... you've got Web sites out there that tell people's credit card info. That's how sophisticated they are."
The FBI and other US agencies said they were investigating a Web site that posted financial and personal information about Michelle Obama, vice-president Joe Biden, other government figures and celebrities.
Some of the information was fraudulently obtained via a commonly used Web site for consumer credit reports, according to credit monitoring firm Equifax, which said it was launching its own internal investigation.
It was unclear how much of the data, which first appeared on the Web site www.exposed.su on Monday, was accurate or who posted it.
The site listed Social Security numbers, telephone numbers, addresses and credit reports purportedly belonging to 18 prominent Americans. At least some of the telephone numbers were inaccurate.
The Web site, whose first page portrayed a mysterious-looking woman wearing heavy eye make-up with one finger over her lips, was still accessible on Tuesday although some links relating to individuals could not be opened.
Others listed on the page included FBI director Robert Mueller, attorney general Eric Holder, former secretary of state Hillary Clinton, Los Angeles police chief Charlie Beck, actors Ashton Kutcher and Arnold Schwarzenegger, and property mogul Donald Trump.
Asked about the posting on Michelle Obama, Secret Service spokesman George Ogilvie said: "We are investigating the matter. Due to the ongoing investigation, we can't comment any further." A Justice Department spokesperson said the FBI was investigating.
Los Angeles police department spokesperson Sara Faden said the department was also looking into the matter but said celebrities would have to file a police report to get their entry investigated.
It was not clear how many, if any, celebrities had filed a report. Faden said the entry of information purportedly on police chief Beck was being investigated.
Equifax, one of three main US credit monitoring companies, said the information for four of the high-profile individuals was accessed through annualcreditreport.com, a shared Web site also used by rivals TransUnion and Experian. It did not name the four individuals.
The company's initial investigation found the perpetrators had personal information on certain individuals that allowed them to pass authentication steps, company spokesman Timothy Klein said.
"The fraudsters would have had to have a lot of information ... this is pretty detailed stuff," he said. Those responsible for the breach would have had to know about mortgages, car loans, or other credit accounts to get the reports, he added.
'Doxing'
Social Security numbers, home addresses and other personal information can be used for identity theft, or other illegitimate purposes such as stalking.
Equifax said it was working to fix the problem, which Klein said involved the credentials used by the free public service Web site that allows consumers to pick which of the three credit monitoring companies' reports they want.
"We are actually taking the necessary steps to further improve and tighten the credentialing process," Klein said.
Six reports from Equifax were linked on www.exposed.su as of Tuesday afternoon and were for rapper Jay-Z, Holder, Schwarzenegger, Beck, former US vice-president Al Gore and reality TV star Kris Jenner.
Experian said it froze the credit files of those "victimised by this malicious attack" and was investigating what information may have been compromised.
It said its own systems had not been hacked. But it said in a statement: "Criminals accessed personal credential information through various outside sources, which provided them with sufficient information to illegally access a limited number of individual reports from some US credit reporting agencies."
TransUnion said its systems had not been compromised. Representatives for Experian did not immediately respond to a request for comment.
The phone number given for Biden on the Web site turned out to be that of a store in Delaware, and one given for Kutcher was for a New York City accounting firm, raising questions about how much of the other information posted was accurate.
FBI spokesperson Jenny Shearer said the Web site under investigation was an example of "doxing" in which someone creates a Web page with a list of personal information about a target.
"What we've seen on the Web site is an example of doxing, with pretty high-profile individuals, celebrities and public figures," Shearer said. "[It] doesn't mean it's true," she added.
Publicists for several of the celebrities named on the Web site and contacted by Reuters declined to comment.
Share