Breach, Threat Management, Data Security

Amn3s1a Team breaches and dumps MEGA source code

The Amn3s1a Team hacking group has released a data dump containing what the group claims is nearly 2GB of source code stolen from several Mega.nz servers.

The data was obtained from the compromised the personal computer of a MEGA contractor who works on an independent system which maintains the public material in our blog and the help center.

Mega Chairman Stephen Hall confirmed the breach occurred in a Nov. 18 statement but said that no user data was compromised adding that any user content is encrypted before it reaches MEGA.

“This person did not have access to user data, neither did the person have access to critical source code, Hall said. “None of the other users with access to that system have been compromised.”

The stolen data did, however, include the source code for Mega Chat, the company's browser-based chat application, Amn3s1a Team told TorrentFreak, and the hackers hinted that they did indeed have some users data but said they didn't have plans to release any of it on short notice.

Some of the source code will be made available and admin login details have already been published.

Kim Dotcom, Mega founder who has since been ousted, criticized the company's security on social media.

“When I was still at Mega we used to pay rewards to security experts for identifying weaknesses in our network,” Dotcom tweeted. “Guess that was discontinued.”

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.