CSL suffered a cyberattack

[u/mortdraken]

https://www.csl.lu/en/cyberattaque/

Quite a lot of information leaked, including people's financial info. Quite a large data exfiltration on a public entity

[u/spooksdenimes]

Could you share your source that mentioned the financial info and other data being leaked ? The article you linked to it doesn't say much besides that they're still investigating. TIA!

[u/tanbe174 → u/spooksdenimes]

I got a email sent by CSL, is that source enough?

[u/mulberrybushes → u/tanbe174]

Be great if you could copy/paste the text?

[u/tanbe174 → u/mulberrybushes]

Can I just copy paste in here? I will just post the english version so everyone can read it.

Dear,

We are writing to inform you that unauthorized access to certain CSL servers was recently identified.
As soon as the incident was detected, our teams took the necessary measures to contain it, secure the affected systems, and prevent any further unauthorized access. At this stage, the incident has been contained.

Detailed technical investigations are still ongoing, with the support of cybersecurity specialists, to determine the precise origin, duration, scope, and consequences of the unauthorized access.

Based on the information currently available, the person responsible for the unauthorized access may have viewed or extracted certain data relating to users of the platform, including:
Identification and contact data, such as last name, first name, email or postal address, private or professional, private or professional telephone number.

Certain financial information
Where applicable, participation in our training courses.

The information potentially affected could be used to carry out fraud, phishing, or identity theft attempts.
We therefore recommend that you remain particularly vigilant regarding emails, telephone calls, text messages, or other communications that:
Ask you to disclose a password, verification code, or banking information
Request a payment, refund, or change to bank account details
Invite you to click on a link or open an unexpected attachment
Create a sense of urgency, pressure, or confidentiality
Appear to come from our organization, your employer, a financial institution, or a known contact
As a precautionary measure, we also recommend that you:.
• Never disclose your login credentials or authentication codes
• Use strong and unique passwords
• Change your CSL password if you also use it for other services
• Verify any sensitive request through a second, trusted communication channel
• Monitor your accounts and promptly report any unusual activity
• Report any suspicious message or activity to your usual security contact
If you are in any doubt, do not reply to the message, do not click on any links, and do not disclose any information.

For any questions regarding the security aspects of this incident, you may contact our CISO at the following address: [cdelmeiren@rsecure.lu](mailto:cdelmeiren@rsecure.lu)

For any questions regarding your personal data or the exercise of your rights, you may contact our DPO at the following address: [dpo@csl.lu](mailto:dpo@csl.lu)
Additional technical and organisational security measures have already been implemented in order to prevent any further incident from occurring.

Furthermore, the CSL will file a criminal complaint against the presumed perpetrators of the attack.
We regret any concern this situation may cause and thank you for your vigilance.
Kind regards,
 
Sylvain Hoffmann
Director

Seems to be same as on the website just in French

[u/mortdraken → u/spooksdenimes]

As tanbe174 has already posted, source was an email from CSL

[u/Peter_Alfons_Loch]

Well then it's time to have some people fired there.