ICANN has reported an attack on its RADAR database, a storage system for contact details of accredited registrars. Only the registrars have access to the database, so the incident should not affect any registrants, ICANN said. However, hackers were able to obtain email addresses, account names and associated passwords of registrar representatives. Even though the passwords were encoded, a brute force attack cannot be ruled out, which would allow cyber criminals to extract this data. RADAR users have been advised to change their passwords immediately.
The attack took place a week ago. The vulnerabilities and the means of hacking have not been disclosed. Currently, RADAR is offline and is expected to be down for at least two weeks.
