kittykatkrew Claims Arkansas Crime Lab Data Theft via Public LASSO Portal
Summary
kittykatkrew claims it breached the Arkansas State Crime Lab through its public LASSO portal and stole court calendars, personnel records, and account metadata. The report says an archive was offered free online.
Key points
- kittykatkrew claims it breached the Arkansas State Crime Lab through the agency’s public-facing LASSO portal.
- The alleged stolen data includes court calendars and a personnel directory of LASSO portal users.
- The report also says account-status information and last-login timestamps were exposed.
- The archive was reportedly offered as a free .rar download, with links to spear[.]cx and biteblob[.]com.
- The supplied report provides no independent confirmation; the breach and data-theft claims remain unverified.
Article Details
- Victim Organization
- Arkansas State Crime Lab
- Victim Domain
- lasso.crimelab.arkansas.gov
- Incident Type
- Alleged breach of the public-facing LASSO portal and exfiltration of data
- Data Types Exposed
- Court calendars
- Personnel directory of LASSO portal users
- Account-status metadata
- Last-login timestamps
- Operational Impact
- The article reports that the exposed information could increase risks of witness intimidation, evidence tampering, and targeted social engineering against prosecutors and law enforcement. No operational disruption is reported.
- Ransom Or Extortion
- A .rar archive was reportedly offered for free; no ransom demand or extortion is reported.
- Claim Status
- claimed
Indicators of compromise
| Type | Indicator | Context |
|---|---|---|
| DOMAIN | biteblob[.]com | Reportedly linked to a free download of the archive containing allegedly exfiltrated data. |
| DOMAIN | spear[.]cx | Reportedly used to post samples of data allegedly exfiltrated from the Arkansas State Crime Lab. |