Investigation reveals weak password use by Hungarian government officials

Hungary's government has been exposed to significant security risks due to the widespread use of weak and reused passwords among its officials. An investigation revealed hundreds of government email and password pairings circulating in data breaches, affecting numerous ministries, with further coverage provided by The Register.

An investigation by Bellingcat uncovered close to 800 Hungarian government email and password combinations in breach dumps, impacting ministries from defense to finance. Approximately 120 compromised records were linked to defense staff, including fallout from a 2023 NATO eLearning platform breach. Many credentials originated from a 2021 surge, but data continued to appear into 2026. The compromised passwords included easily guessable terms like "FrankLampard," "123456aA," and "cute."

Officials were using government emails for third-party services and reusing passwords, which led to their exposure when those sites were breached. Infostealer logs also indicated active compromise of dozens of machines.

Source: The Register