Hackers claiming to be affiliated with Anonymous have exposed a list of Navy email logins after breaking into Queen's Harbour Masters websites.
The websites, which are hosted by the Ministry of Defence (MoD), are public-facing, and not linked to internal MoD systems, an MoD spokesman told SC Magazine UK on Wednesday.
"The MoD is advising [affected] staff to change their email login details now," the spokesman said. "No [internal] MoD website was attacked and no further information was taken."
Queen's Harbour Masters liaise between military and civilian shipping to ensure the safe movement of traffic in and out of harbour. The Navy email logins that were compromised belonged to staff who coordinate the shipping movements at three ports: Plymouth, Clyde and Portsmouth.
The hackers who stole the details, 'Null' and 'Timoxeline', belong to the 'NullCrew' hacking group. 'Null' and 'Timoxeline' said they used SQL injection to gain access to the logins in a document posted on the AnonPaste pastebin. SQL injection involves a hacker entering SQL statements into a web form to gain the contents of a database.
Anonymous claimed a number of document leaks around Guy Fawkes day, including VMware source code.