Verkada Surveillance Cameras at Tesla, Hundreds More Businesses Breached
upstart writes in with an IRC submission:
Verkada surveillance cameras at Tesla, hundreds more businesses breached: hackers:
A small group of hackers viewed live and archived surveillance footage from hundreds of businesses including Tesla Inc by gaining administrative access to camera maker Verkada over the past two days, one of the people involved in the breach told Reuters.
Swiss software developer Tillie Kottmann, who has gained attention for finding security flaws in mobile apps and other systems, shared screenshots on Twitter from inside a Tesla warehouse in California and an Alabama jail in messages to Reuters. Kottmann declined to identify other members of the group.
Kottmann said they sought to draw attention to the pervasive monitoring of people after having found login information for Verkada's administrative tools publicly online this week.
Verkada acknowledged an intrusion, saying it had disabled all internal administrator accounts to prevent unauthorized access.
"Our internal security team and external security firm are investigating the scale and scope of this issue, and we have notified law enforcement" and customers, the company said.
Kottmann said Verkada cut off the hackers' access hours before Bloomberg first reported the breach on Tuesday.
The hacking group, if it had chosen, could have used its control of the camera gear to access other parts of company networks at Tesla and software makers Cloudflare Inc and Okta Inc, according to Kottmann.
Tesla, Cloudflare and Okta did not immediately respond to requests for comment.
Also at Bloomburg, Yahoo, Verkada, BBC, and Engadget among others.
Read more of this story at SoylentNews.