• Guest, UPDATE We went through the site migration runbook and completed all steps. We will need to complete the migration next week, but will leave the forums up for the weekend. A few days after maintenance, a major upgrade revision to the forum site will occur.
  • HTML tutorial

Garmin Hacked. Looking for update.

Island Overlander

Rank III
Launch Member

Enthusiast III

I read last week that Garmin was hacked and they were locked out of some of their stuff until they paid a ransom.

Can anyone give me an update?
 

ersmith

Rank II
Launch Member

Member I

Just an FYI, this style of attack doesn't give anyone access to the data (it is different from the data breaches which expose passwords, credit card info, etc.). It is more likely to cause data loss then anything else (and gives you a good idea of what a companies backup strategy looks like).
 

JPM78130

Rank IV
Launch Member

Enthusiast III

Just an FYI, this style of attack doesn't give anyone access to the data (it is different from the data breaches which expose passwords, credit card info, etc.). It is more likely to cause data loss then anything else (and gives you a good idea of what a companies backup strategy looks like).
Not necessarily true. There's no way to tell how extensively they were compromised without some sort of forensics.
 

ersmith

Rank II
Launch Member

Member I

Not necessarily true. There's no way to tell how extensively they were compromised without some sort of forensics.
While technically true, the type of attacks where data is encrypted do not require an attacker to be able to directly access data and usually involve tricking someone into dowloading/using a compromised piece of code which encrypts the data. This does not give the attacker access to the data. Attackers who steal data usually want to avoid detection as when they are detected they loose access, people are notified and credit card numbers/usernames and passwords start to be changed.

As a garmin user myself, my main concern at this point is that some of my data may be permenantely missing.
 

wigsajumper

Rank V
Launch Member

Advocate I

While technically true, the type of attacks where data is encrypted do not require an attacker to be able to directly access data and usually involve tricking someone into dowloading/using a compromised piece of code which encrypts the data. This does not give the attacker access to the data. Attackers who steal data usually want to avoid detection as when they are detected they loose access, people are notified and credit card numbers/usernames and passwords start to be changed.

As a garmin user myself, my main concern at this point is that some of my data may be permenantely missing.
While this is true that encryption ransomeware doesn't always mean data was compromised/stolen it can cover that theft up. In fact because they are going to be needing to do so some sort of backup restoration after everything is decrypted it will make it even harder to see if any data had been transfered.
 

JPM78130

Rank IV
Launch Member

Enthusiast III

While this is true that encryption ransomeware doesn't always mean data was compromised/stolen it can cover that theft up. In fact because they are going to be needing to do so some sort of backup restoration after everything is decrypted it will make it even harder to see if any data had been transfered.
That's exactly what I was thinking, arson after the burglary. You must assume that everything was compromised.
 

64Trvlr

Rank V
Launch Member

Member III

While I have and use several Garmins it makes me appreciate my old school note books, maps and compass even more.
 
Top