[RISK] Hundreds of employees at the French Ministry of Justice (justice.fr) are facing the risk of account takeover (ATO).
Summary：At least hundreds of employees in the French Ministry of Justice (the department that arrested Telegram CEO Pavel Durov and issued his crimes) face the risk of account takeover (ATO).
For instance, administrators from the Ministry of Justice can log in to the Court Interpretation Service website to perform operational tasks.
It enables retrieval of the names, phone numbers, email addresses, addresses, and personal information of thousands of interpreters and translators.
Additionally, a substantial number of employees within the Ministry of Justice are at risk of having their personal privacy compromised due to the threat of Account Takeover (ATO), exposing not only basic personal information such as names, phone numbers, and addresses, but also more sensitive details like preferences and purchase histories.
We recommend notifying the website's members of the leaked login credentials through 'Dark Web Reports', urging them to promptly update their credentials. Regardless of whether 2FA is implemented, securing leaked accounts by locking them and resetting login credentials is a robust security measure. Additionally, it’s advisable to alert affected users to change their passwords immediately. DarkWeb.vc offers highly cost-effective intelligence on login credential leaks to enterprises.