Apple and Meta provided basic subscriber details, such as a customer’s address, phone number and IP address, in mid-2021 in response to the forged “emergency data requests.”These requests are usually granted only with a search warrant or subpoena signed and certified by a judge. However, the emergency requests don’t require a court order.
Snap Inc. received a forged legal request from the same hackers, but it isn’t known whether the company provided data in response. It’s also not clear how many times the companies provided data prompted by forged legal requests.
Cybersecurity researchers believe that hackers are sending forged requests from minors in the U.K. or the U.S. Seven people were arrested by the City of London Police in connection to an investigation into Lapsus$’ hacking group. The probe is ongoing.
Bloomberg News was referred by an Apple representative to a section in its law enforcement guidelines.