Apparently a fucking grade schooler breached a regional database in Norway.

On Monday Bergen county got breached. Estimated to have exposed ~35 000 people's personal data. He basically got access to a domain-wide Administrator user across a shitload of Windows servers. And by extension the SQL databases that stored a bunch of data about a ton of people. None of the news articles I've seen mentioned exactly what data it was however.

Today the western police branch managed to trace it back to some kid in fucking grade school.

And they also found out that he warned them about the security hole way back in spring and only rekt them to actually make them pay attention to it.