<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div><br>
</div>
<div style="">
<title>ICANN News Alert</title>
<meta content="icann, internet, internet corporation for assigned names and numbers, iana" name="keywords">
<meta content="Internet Corporation for Assigned Names and Numbers" name="description">
<div style="background-color: #ffffff; font-family: arial; font-size: small;">
<div style="width:758px; padding:10px; border: 1px solid #cccccc; margin-left: auto; margin-right: auto;">
<div style="width: 738px; margin-left: auto; margin-right: auto;"><a href="http://www.icann.org/"><img alt="ICANN" src="http://www.icann.org/images/gradlogo_bow.jpg" style="border: 0px; width: 94px; height: 94px; float: left; margin-top: 0px; margin-right: 10px;"></a>
<h2>News Alert</h2>
<p style="margin: 0px 0px 10px 0px; font-family: arial; font-size: small;"><a href="https://www.icann.org/news/announcement-2014-12-19-en">https://www.icann.org/news/announcement-2014-12-19-en</a></p>
<hr style="margin: 20px 0px 0px 0px;">
<h2 style="clear: left; margin-bottom: 0px;">IANA Systems Not Compromised</h2>
<p style="margin: 15px 0px 0px 0px;">19 December 2014</p>
<p>As ICANN reported on 16 December 2014, it was recently the target of a so-called "spear phishing" attack. During this attack the email credentials of some ICANN staff were compromised.</p>
<p>As mentioned in our <a href="https://www.icann.org/news/announcement-2-2014-12-16-en">
original announcement</a>, we have confirmed that the attack has not impacted any IANA-related systems. The ICANN staff members whose passwords were compromised did not have access to the IANA functions systems.</p>
<p>The IANA functions are a separate system with additional security measures that have not been breached.</p>
<p>During and after the attack, all critical functions hosted by hosted by ICANN, including the IANA functions, remained fully operational and unaffected by the attacker's activities.</p>
<p>ICANN employs multiple levels of protection for its most critical services. While the attackers were able to breach the outermost layer of defenses, our on-going investigation indicates our most critical systems were not affected.</p>
</div>
</div>
<br>
</div>
</div>
</span>
</body>
</html>