F-35 data stolen from Australian defense contractor

Sloppy cyber-security practices has allowed hackers to steal data on the F-35, C-130 and JDAM from an Australian defense contractor.

RAAF F-35 taking off during the Australian International Airshow and Aerospace & Defence Exposition 2017
By U.S. Air Force photo/Master Sgt. John Gordinier [Public domain], via Wikimedia Commons

Forensic investigations by the Australian Signals Directorate (ASD) found the company was using default passwords on its internet facing services.

But the hackers gained access by exploiting a vulnerability with the firm’s IT helpdesk portal.