Viking Line Breach Allegedly Exposes Customer and Internal Data
Summary
An unidentified actor allegedly exploited a Local File Inclusion flaw in Solr to access Viking Line databases. The reported data includes traveler details, payment records, vehicle registrations, and internal account information; the claims are unconfirmed.
Key points
- An unidentified actor allegedly exploited a Local File Inclusion vulnerability in Solr and obtained Tomcat credentials.
- The actor reportedly used those credentials to access Viking Line’s master database.
- A traveler database allegedly exposed names, contact details, and vehicle registrations.
- A secondary database accessed through the NetAxept API reportedly contained payment amounts and transaction comments.
- Internal account records, including email addresses, roles, and password hashes, were allegedly exposed.
- The article provides no independent confirmation of the breach or the reported data exposure.
Article Details
- Victim Organization
- Viking Line
- Incident Type
- Alleged data breach involving exploitation of a Local File Inclusion vulnerability in Solr to obtain Tomcat credentials and access databases.
- Data Types Exposed
- Full names
- Email addresses
- Phone numbers
- Vehicle registration plates
- Payment amounts
- Transaction comments
- Internal account emails
- Internal account roles
- Password hashes
- Claim Status
- alleged
MITRE ATT&CK
Products
Apache SolrViking Line has allegedly been breached after an unidentified actor exploited a Local File Inclusion vulnerability in Solr to obtain Tomcat credentials and access the master database.NetAxept APIA secondary payments database via the NetAxept API, including transaction amounts and comments, was also reportedly compromised.TomcatViking Line has allegedly been breached after an unidentified actor exploited a Local File Inclusion vulnerability in Solr to obtain Tomcat credentials and access the master database.