A lack of security controls allowed hackers to "wipe" the Recording Industry Association of America's (RIAA) website on Sunday.

The existence of an SQL injection attack on the RIAA's site came to light via social network news site Reddit. Soon after hackers were making merry, turning the site into a blank slate, among other things.

The RIAA has restored RIAA.org, although whether it's any more secure than before remains open to question, TorrentFreak reports.

The RIAA's high-profile lawsuits against file sharers have made it a prime target for hack attacks, so its apparent failure to apply rudimentary security controls looks especially dumb even though, as with most such attacks, little damage was actually caused.

In other hacking news, the Church of Scientology's website reportedly came under attack last week, leaving it unavailable for parts of the weekend.

The attack was reportedly an act of hacktivism prompted by the organisation's attempts to pull a promotional video featuring Scientologist Tom Cruise from YouTube. YouTube pulled the clip, but the material has since resurfaced on Gawker.com. ®

More comments…

Related stories

RIAA chief calls for copyright filters on PCs (8 February 2008)
RIAA told to pay legal fees for harrassed defendant (17 January 2008)
Tom Cruise Scientology vid leaks onto net (16 January 2008)
Rebranding the RIAA (15 January 2008)
RIAA 'to disappear'? (11 January 2008)
'Ragtag' Russian army shows the new face of DDoS attacks (4 January 2008)
Botnets linked to political hacking in Russia (14 December 2007)
Cyberwarfare levels the playing field (6 November 2000)
Hacktivist group jumps on the DDoS bandwagon (11 March 2000)