Tag: data breaches

These updates are shared to help raise the situational awareness of Faith-Based organizations to best defend against and mitigate the impacts from all-hazards threats including physical security, cybersecurity, and natural disasters.  

FB-ISAO Members Inform Our Products: Security Sweeps! 

This article discusses a new product offered by the FB-ISAO related to social media sweeps. This product helps organizations monitor their online presence to assess potential risks and threats. By conducting social media sweeps, organizations can identify mentions of their name or sensitive information that could be exploited by threat actors. The process includes periodic reviews to keep search terms relevant and up-to-date. This initiative was informed by feedback from FB-ISAO members and developed with the expertise of the Cybersecurity Threat Intelligence Working Group. The product is available to FB-ISAO members. 

Ransomware Threat Investigated at Teays Valley Christian School in Putnam County 

According to the Putnam Country Sheriff’s Office, a student received a threatening message stating that if a specific file was not downloaded, a so-called “hit list” would be distributed using the student’s email. The incident is being treated as a cybersecurity threat.  

Analyst Comments: The ransomware threat at Teays Valley Christian School highlights the growing cybersecurity risks faced by Faith-Based institutions, including schools. This kind of attack is concerning for Faith-Based schools because of their reliance on digital systems for communication, administration, and student data management, making them a target for cybercriminals. It is important for Faith-Based institutions to prioritize cybersecurity awareness.  

It is also important to remember that it only takes one member of an organization (in this instance a student) to click the wrong link or download the wrong file to initiate a cyber incident. That is why our friends at Take9 encourage everyone to take a 9 second pause and think before you click, download, and share. And for organizations that have not developed an incident response plan for ransomware incidents, CISA’s #StopRansomware is a good resource to consider.  

‘Systematic targeting’: Sudan interrogates, jails 19 Christians 

In Sudan’s city of Madani, 19 Christians have been arrested in January and February by security forces linked to the Sudan Armed Forced (SAF). The Christians were accused of supporting the paramilitary Rapid Support Forces (RSF), despite no evidence linking them to the group. Arrested while traveling to a prayer meeting, they faced extensive interrogations being transferred to prison. Additionally, 12 Christan’s from Wad Rawah have gone missing under similar charges. Christian rights groups have condemned the arrests as part of systematic effort to target Christians. This follows the government’s 2024 law granting immunity to intelligence officers, further enabling such actions. The situation worsens as Sudan’s civil war continues.  

Analyst Comments: The arrest of 19 Christians in Sudan underscores the ongoing and growing challenges faced by Faith-Based communities, in regions experiencing political and civil unrest. This incident serves as a reminder for Faith-Based organizations of the need for advocacy, international solidarity, and the defense of religious freedom. The International Institute for Religious Freedom has previously published best practices to reduce, resolve and prevent religious conflict. 

Religious Freedom 

These updates are shared to help raise the situational awareness of Faith-Based organizations to best defend against and mitigate the impacts from all-hazards threats including physical security, cybersecurity, and natural disasters. 

Cybersecurity Experts Are Sounding the Alarm on DOGE 

The article discusses concerns raised by cybersecurity experts regarding Elon Musk’s DOGE, which has made significant cuts to federal programs, including cybersecurity positions and contracts. Experts warn that these changes could increase the risk of data breaches, fraud, and privacy violations, particularly with sensitive government data, such as veterans’ records and financial information. The reduction in cybersecurity personnel and oversight could allow bad actors to exploit vulnerabilities, potentially leading to identity theft, fraud, and national security risks. Furthermore, experts are concerned about the long-term consequences of these systemic changes, which could disrupt critical government services and infrastructure. 

Analyst Comments: Faith-Based communities often store sensitive data related to personal information, donations, and community members, and are not immune to cybersecurity attacks.  Faith-Based communities may be affected by administration decisions as a whole if the U.S. government is less capable of mitigating and supporting cyber attacks, but also individual members of communities that might have their personal information unintentially exposed through DOGE efforts.. This is a reminder to adopt good cyber hygiene practices and members can find good information on those in our Resource Library – FB-ISAO. 

Former employee accused of stealing $30K from Rock Hill church 

 A former employee, Jennifer Farmer, is accused of stealing $30,000 from Oakdale Baptist Church in Rock Hill, South Carolina. Farmer is charged with breach of trust with fraudulent intent after using a church credit card for personal purchases over several years. She allegedly tried to cover up the theft by deleting computer records. If convicted, Farmer faces up to 10 years in prison. This case highlights the risks churches face in preventing financial misconduct and maintain trust with their congregations.  

Analyst Comments: Faith-based organizations continue to face challenges when it comes to financial oversight and security. This case underscores the need for churches to have clear policies in place regarding employee responsibilities and the use of church funds, and to develop proper control measures to ensure policies are being adhered to. 

Potential Terror Threat Targeted at Health Sector – AHA & Health-ISAC Joint Threat Bulletin – Health-ISAC – Health Information Sharing and Analysis Center 

Earlier this week, the American Hospital Association (AHA) and Health-ISAC released a bulletin related to an observed social media post indicating active planning of a coordinated, multi-city terrorist attack on hospitals in the coming weeks. The organizations do note that generally, foreign terrorist groups do not publicize their upcoming attacks. However, they believe this widely viewed post may encourage others to engage in malicious activity directed toward the health sector.  

Analyst Comments: This social media excitement is very reminiscent of a similar incident relating to a supposed Halloween Shopping Mall threat a few years back. Such incidents may be based on some level of actual intelligence or reporting but often get spun up by circular reporting and “Fear, Uncertainty, and Doubt” (FUD). Since the release of this bulletin, several state and local fusion centers have emphasized that there is no credible reporting to substantiate this threat. All threats should be taken seriously but also cautiously assessed.  

Exclusive: FBI scales back staffing, tracking of domestic terrorism probes 

The FBI has cut staffing in an office focused on domestic terrorism and has scrapped a tool used to track such investigations, in a shift that could undermine law enforcement’s ability to counter white supremacists and anti-government extremists, according to sources familiar with the matter. The moves, sources said, are an indication that domestic terrorism investigations, which in recent years have largely involved violence fueled by right-wing ideologies, may be less of a priority under FBI Director Kash Patel, a prominent critic of the effort. Some sources said the changes will reduce the FBI’s ability to monitor threats posed by white supremacists and militia groups and potentially hamper law enforcement’s ability to disrupt plots. The moves come despite repeated warnings from U.S. officials in recent years that domestic violent extremists present some of the most significant security threats to the United States. 

• FBI has reassigned staff in domestic terrorism 
• Probes no longer tagged as tied to violent extremism 
• Moves follow Republican criticism of earlier efforts 

Analyst Comments: The recent shifts within the FBI, including cuts to the staffing in its office focused on domestic terrorism and the discontinuation of a tool used to track such investigations, could have significant consequences for law enforcement’s ability to respond to and counteract domestic violent extremism. As with any change in administration, there will be different operational priorities. FB-ISAO will continue to track domestic terrorism threats, as we track the all-hazards threat landscape.  

These updates are shared to help raise the situational awareness of Faith-Based organizations to best defend against and mitigate the impacts from all-hazards threats including physical security, cybersecurity, and natural disasters. 

Mississippi Man Indicted for Federal Civil Rights and Arson Charges for Setting Fire to Mormon Church 

A Mississippi man, Stefan Day was indicted on federal civil rights and arson charges for setting fire to a Mormon church in Wiggins, Mississippi, on July 5 and July 7, 2024. He faces six counts, including arson, religious property destruction, and using fire to commit a felony. If convicted, Day could face up to 20 years in prison for each arson or civil rights charge and a minimum of 10 years for the fire-related felony. The FBI, along with other agencies, investigated the case. 

Analyst Comments: Arson continues to be a popular attack method given the low sophistication needed to pull off such an attack. CISA has reported that arsons increased 29.8% between 2021 and 2022. In their most recent Fire as a Weapon guide, CISA notes the importance of engaging with local emergency medical service (EMS) personnel to develop an Emergency Action Plan, while also employing surveillance equipment to adequately monitor suspicious activity.  

Suspect surrenders to police after hours-long standoff near CIA headquarters in Virginia 

A suspect surrendered after an hours-long standoff near the CIA headquarters in Virginia. Law enforcement responded to reports of a man near the complex, which led to a tense situation. The standoff occurred early in the day and drew attention from federal authorities, including the FBI and other agencies. The suspect eventually gave himself up peacefully, and no injuries were reported. Authorities did not immediately provide more details on the nature of the incident or the identity of the suspect.  

More Resources: 1 in custody after hours long standoff at CIA headquarters in McLean 

Analyst Comments: The proximity of the standoff to the CIA headquarters highlights ongoing concerns regarding the security of federal agencies, especially intelligence and national security institutions. The public nature of the standoff also underscores the constant need for robust security measures to prevent unauthorized access. Incidents like this, recent assassination attempts, and violent protests do point to an acceptance of more extreme and violent measures across society. Organizations will want to consider that shift as they develop their threat assessments. 

New Dates Added: Live Virtual Presentations on Targeted Violence Prevention 

The U.S. Secret Service National Threat Assessment Center (NTAC) has announced new dates for live virtual presentations focused on preventing targeted violence. These sessions will share insights from decades of research on violence prevention and provide strategies for mitigating threats in workplaces, schools, religious institutions, and communities. The events are regularly updated, with different topics each month. Registration details and further information can be found on the official website. 

Enhancing School Safety Using Behavioral Threat Assessment 

• Wednesday May 21, 2025 | 12:00 – 2:00 PM EST 
• Wednesday July 16, 2025 | 12:00 – 2:00 PM EST 
• Wednesday September 17, 2025 | 12:00 – 2:00 PM EST 

Preventing Mass Attacks in Our Communities 

• Wednesday April 16, 2025 | 12:00 – 2:00 PM EST 
• Wednesday June 18, 2025 | 12:00 – 2:00 PM EST 
• Wednesday August 20, 2025 | 12:00 – 2:00 PM EST 

Register here. 

These updates are shared to help raise the situational awareness of Faith-Based organizations to best defend against and mitigate the impacts from all-hazards threats including physical security, cybersecurity, and natural disasters. 

Weekly Security Sprint EP 103. Severe Weather, Scams, Insider Risks 

The Gate 15 Security Sprint is a weekly rundown of the week’s notable all-hazards security news, risks and threats and some of the key focus areas for organizations to consider behind the headlines. Gate 15 team members discuss physical security, cybersecurity, natural hazards, health threats and other issues across our environment.   

In this week’s Security Sprint, Dave and Andy covered the following topics:

• Severe weather 
• Scams & Fraud  

Information on other Gate 15 podcasts can be found here.  

They worked to prevent violence and terrorism at the agency created after 9/11. Then they got fired 

The article discusses DHS’s recent layoffs of 20% of the staff at the Center for Prevention Programs and Partnerships (CP3) as part of a broader effort to reduce government spending. CP3, which was established after 9/11 to prevent targeted violence and terrorism, trains community members to identify potential threats and intervene before violence occurs. The layoffs included key professionals, such as social workers and mental health experts, causing concern among experts about the effectiveness of center’s mission. Following legal ruling, the fired staff were rehired but placed on administrative leave. Critics argue that cutting back on this program undermines efforts to prevent violence, highlighting the need to expand such initiatives instead of reducing them.  

Analyst Comments: In the article it is highlighted how faith-based leaders play a crucial role in preventing violence and terrorism. Faith leaders are seen as integral to community outreach and intervention efforts because of their trusted position within local communities. They often have the ability to influence individuals, detect signs of radicalization or distress, and offer support before issues escalate. The article argues that faith leaders are key in building relationships and trust with communities, making them essential in prevention efforts. DHS’s personnel moves mean the community’s role in preventing targeted terrorism is even greater, and there are still plenty of useful resources available online to help inform faith-based leaders. We recommend reviewing the “Bystanders are Key to Countering Terrorism” resource which was jointly developed by DHS, FBI, and the National Counterterrorism Center (NCTC).  

Texas wildfire map shows where blazes burning as warnings issued 

As of March 19, 2025, Texas is experiencing multiple wildfires across various regions, exacerbated by critical fire weather conditions. There are warning issued due to strong winds, dry conditions, and high fire risks. The National Weather Service has issued red flag warnings signaling critical fire conditions with low humidity, high winds, and warm temperatures. Meteorologists note that wildfire activity has been high across West Texas this year, exacerbated by drought and windy conditions. Officials stress fire prevention, urging residents to clear vegetation around properties, follow burn bans, and be prepared with evacuation plans. Firefighters are working to control the fires, but residents are advised to stay alert and follow local emergency guidelines.  

Analyst Comments: Dry vegetation, combined with high temperatures and windy conditions, creates significant challenges for containment efforts. Emergency management teams are working tirelessly to control the blazes, but the number of fires could continue to rise as long as these conditions persist. It is important to take fire prevention seriously, including clearing defensible spaces around properties. The importance of preparedness, including having evacuation plans and emergency kits, has been underscored, as wildfires can spread rapidly and unexpectedly.  

• Wildfire Preparedness 
• Protect People, Pets, and Property from Wildfire 

These updates are shared to help raise the situational awareness of Faith-Based organizations to best defend against and mitigate the impacts from all-hazards threats including physical security, cybersecurity, and natural disasters. 

Suspect charged with hate crimes spree that included attacks at 5 Toronto synagogues 

A 32-year old man, Amir Arhavi Azar, from Toronto, has been charged with a series of antisemitic hate crimes that occurred over eight months. The crimes include vandalizing signs at four synagogues, damaging a window at a fifth synagogue, threatening the Forest Hill Jewish Centre, and causing harm to a Jewish-owned coffee shop. Azar faces 29 charges including advocating genocide and inciting hatred. His actions took place between April 2024 and January 2025. Azar was arrested on January 11 and released on bail. Police are continuing their investigation.  

Analyst Comments: This case highlights a concerning rise in antisemitic incidents in many parts of the world, including Canada. This case reflects a broader trend of rising hate crimes against Jewish communities, which can be fueled by social, political, or ideological movement that spread intolerance. As always, FB-ISAO’s website has valuable resources at Resource Library – FB-ISAO 

Password reuse is rampant: nearly half of observed user logins are compromised 

Cloudfare’s recent analysis highlights the alarming prevalence of password reuse and its role in online security breaches. Their data, collected from September to November 2024, reveals that 41% of successful human logins involve compromised credentials. Bots exacerbate this issue, with 52% of all detected login attempts involving leaked passwords. Popular platforms like WordPress are particularly vulnerable to credential stuffing attacks, a high success rate of bot-driven logins using stolen credentials. Cloudfare urges users to use unique, strong passwords, enable multi-factor authentication, and for website owners to implement credential leakage detection to protect against these widespread threats.  

Analyst Comments: The data underscores the critical problem of password reuse, a behavior that remains widespread despite security advisories. It is important to implement strong authentication methods to mitigate these risks. The report suggests using unique, strong passwords, and enabling multi-factor authentication. Members of the faith-based community are encouraged to enact strict password policies to help safeguard systems. Utilizing a password manager can help with the ease of remembering lengthy passwords and utilization of MFA is always a wise step for added security.  

• Use Strong Passwords 
• More than a Password 
• What is two-factor authentication? 

50501 — 50 protests, 50 states, 1 movement 

The website “FiftyFifty.one” represents a grassroots movement called #50501, which aims to challenge executive overreach and protect democratic institutions. The movement’s primary action is organizing nationwide protests, with the goal of having 50 protests across 50 states on a single day. It started as a response to actions by the Trump administration and has since grown into a platform for peaceful activism. The website encourages participation in protests, volunteering, and spreading awareness, while providing resources for organizers and activists. The movement is focused on unity, community-building, and non-violence.  

Analyst Comments: The movement’s emphasis on non-violence and community-building could be seen as a strategic approach to ensure that the protests maintain broad public support and avoid violent or chaotic demonstrations. Even planned peaceful protests pose the potential for violence. Either has a target for terrorism and extremist activities, or for clashes with counter-protesters. If protests do become violent, there is always the possibility for that activity to spill to adjacent areas which could impact Houses of Worship in some locations. 

• Tips for Preparedness, Peaceful Protesting, and Safety 
• Protecting Infrastructure During Public Demonstrations 

How the U.S. is confronting the threat posed by drones swarming sensitive national security sites 

The 60 Minutes report discusses the growing national security threat posed by drone swarms infiltrating sensitive U.S. military and infrastructure sites. A key incident highlighted occurred in December 2023 when drones appeared over Langley Air Force Base in Virginia, home to advanced fighter jets. The drones, seen in large numbers and various sizes, prompted concern but were difficult to track or neutralize due to limitations in the U.S. defense systems, especially radar designed for higher-altitude threats. 

The drones are believed to have been used for surveillance, with some experts, including Sen. Roger Wicker, suspecting foreign intelligence component. Despite several drone incursions over critical sites like nuclear plants and military bases, the Pentagon has struggled to respond effectively, citing a gap in the technology needed to detect and counter low-flying drones.  

More resources:  

• The challenge of stopping drone swarms 
• Drone swarms inside the U.S. could be spying — and the ability to detect, track them is lagging 

Analyst Comments: As drones become more prevalent in modern society, their risks also increase. Last year we saw reports of drones being utilized by burglars to conduct surveillance for future break-ins. If you see what you believe to be illegal drone activity near your facilities, members are encouraged to contact local law enforcement, as well as the FAA’s Flight Standards District Office.