Man Questioned Over Hacking Of Abortion Provider Website Claims Links With Anonymous

Abortion Hacking

First Posted: 9/03/2012 05:34 Updated: 9/03/2012 07:24   PA

A man suspected of hacking into the website of one of the country's biggest abortion providers was being questioned by police on Friday.

The 27-year-old, who claims to have links to Hacktivist group Anonymous, was arrested during the early hours of this morning on suspicion of offences under the Computer Misuse Act, Scotland Yard said.

It comes after the website of the British Pregnancy Advisory Service (BPAS) was hacked into and defaced yesterday. Data on the website, which is currently down and can not be viewed, was also compromised, police said.

Officers from the Metropolitan Police's Central e-Crime Unit executed a search warrant at an address in Wednesbury, West Midlands, before arresting the suspect who is currently in custody at a West Midlands Police Station.

Police said they were alerted to allegations that the BPAS website has been hacked yesterday.

Claims later appeared on Twitter that the culprit had accessed the names of women who had undergone terminations and was threatening to release them into the public domain.

However, police said the stolen data did not contain any medical details of women who had received treatment.

Detective Inspector Mark Raymond from the Met's e-Crime Unit said: "We have taken rapid action to identify and arrest a suspect involved in hacking.

"This was done to prevent personal details of people who had requested information from the BPAS website being made public.

"It should be stressed that the stolen data did not contain the medical details of women who had received treatment or why individuals had contacted the British Pregnancy Advisory Service."

BPAS is a non-statutory abortion provider and has a number of clinics across the country.

It also provides counselling for unplanned pregnancy and abortion treatment and gives advice about contraception, sexually transmitted infection testing and sterilisation.

FOLLOW HUFFPOST UK TECH

A man suspected of hacking into the website of one of the country's biggest abortion providers was being questioned by police on Friday. The 27-year-old, who claims to have links to Hacktivist grou...
A man suspected of hacking into the website of one of the country's biggest abortion providers was being questioned by police on Friday. The 27-year-old, who claims to have links to Hacktivist grou...
Filed by Lucy Sherriff  | 
 
 
  • Comments
  • 2
  • Pending Comments
  • 0
  • View FAQ
Post Comment Preview Comment
To reply to a Comment: Click "Reply" at the bottom of the comment; after being approved your comment will appear directly underneath the comment you replied to.
View All
Recency  | 
Popularity
11:00 on 09/03/2012
that may be so. However Abortion is a 'hot potato' in the US, especially politically and the little runt put women's lives in danger. Not good!
09:58 on 09/03/2012
I noticed the hack pretty early in the morning, it looked like a fairly amateur SQL injection attack where they'd just lucked out, and I doubt, unless BPAS have security practises that would go against the Data Protection Act (unlikely), that any medical data would not be stored on the webserver. Unfortunately, it looks like their web team was pretty amateur (SQLi is really easy to protect against), especially for such a controversial (in the eyes of some extremists, anyway) site.

From what I can ascertain from the speed that he was arrested, PabloEscobar most likely did not spoof his IP (through the use of anonymisation services such as Tor, or hacked/zombied PCs) and thus for sysadmins it would have been a case of looking through the logs and telling the MET about the IP address that ran a "brute force" of SQL injections against the site (hence the "20,000 times" detail on the Telegraph article) - essentially trying every combination of URLs and injection code, until one worked. This is pretty much the most easy to execute and low-level attack, which is why PabloEscobar has only attacked the odd vulnerable site (he's not a "real" hacker, just some kiddie), and why BPAS web team should be ashamed ;-)

All of this information is just extrapolated from the facts and my knowledge on the subject (as an experienced developer), and a brief exchange where I goaded him on Twitter before the arrest, so I may be completely wrong!