Scotland's university procurement center confirms cybercrooks broke in Advanced Procurement for Universities and Colleges (APUC) says attackers gained unauthorized access to historical data in a cyberattack earlier this month. The Scottish education procurement body said it immediately contained the mid-July intrusion and was investigating claims that some of the data had been stolen. "We recently …
"We are aware that the group responsible for the unauthorized access has claimed to have taken some historic data from our systems."
As a Scottish graduate I'm _authorised_ to remind you…
Historic = something important or significant in history.
Historical = things from the past, without implying importance.
I guess our procurement centres of expertise ain't what they used to be ;-)
"It sounds like the miscreant acquired administrator rights. Many system protections permit admins to export large blocks of data to disk (eg make a backup), even if plebs cannot."
If one can root a system from the internet to get unlimited or admin rights and move data, I consider that data as internet accessible. My CAD computer is not internet accessible as it's devoid of a network connection. While my accounting computer is network connected, connections are restricted and its only on when I'm actively using it.
Physical access leaves an attack surface, but it takes an insider.
