
Incident: APNIC resets passwords after whois credentials leaked | iTnews

Australian Information Security Incident Reported: October 24 2017
Regional internet registry for Australia APNIC has been forced to reset all passwords for objects in its whois database after a technical error leaked hashed authentication credentials.
Due to a technical error during the upgrade of APNIC’s whois database in June 2017, hashed authentication details for APNIC whois Maintainer and IRT objects were inadvertently included in downloadable whois data, which is released to certain external parties under an Acceptable Use Policy.
Source: APNIC resets passwords after whois credentials spill – Security – Telco/ISP – iTnews
Company Response: Whois Maintainer and IRT objects error resolved