620 million accounts across 16 'hacked' websites now for sale on dark web, seller claims

guest · Feb 11, 2019

620 million accounts across 16 'hacked' websites now for sale on dark web, seller claims
Dubsmash, Armor Games, 500px, Whitepages, ShareThis, and more allegedly up for grabs for $$$s in BTC
February 11, 2019
https://www.theregister.co.uk/2019/02/11/dark_web_hacked_accounts_for_sale/

Exclusive Some 617 million online account details stolen from 16 hacked websites are on sale from today in bulk on the dark web, according the data trove's seller.
For less than $20,000 in Bitcoin, the following purportedly pilfered account databases can be purchased from the Dream Market cyber-souk, located in the Tor dark web: [...]

Sample account records from the multi-gigabyte databases seen by The Register at least appear to be legit: they consist mainly of account holder names, email addresses, and passwords. These passwords are hashed, or one-way encrypted, and must therefore be cracked before they can be used.

The seller told The Register they have as many as 20 databases to dump online, while keeping some other ones back for private use, and that they have swiped roughly a billion accounts from servers to date since they started hacking in 2012.
Click to expand...

guest · Feb 14, 2019

Coffee Meets Bagel Dating App Warns Users of Breach
February 14, 2019
https://threatpost.com/coffee-meets-bagel-breach/141850/

Popular dating app Coffee Meets Bagel has sent its users an email notifying them that their data may have been “acquired by an unauthorized party.”

The news comes days after a massive database containing the information of around 6.2 million Coffee Meets Bagel users showed up on the Dark Web. Users received notice of the breach (ironically) on Feb. 14, in an email which was shared with Threatpost.
“On February 11, 2019, we learned that an unauthorized party gained access to a partial list of user details. Once we became aware, we quickly took steps to determine the nature and scope of the problem,” the notification reads.

Coffee Meets Bagel confirmed to Threatpost that its breach is indeed linked to the database found on the Dark Web, and that up to 6 million users were impacted.
Click to expand...

guest · Feb 15, 2019

Artsy Alerts Users of Data-Security Breach; Report Claims Hacked Information for Sale
February 14, 2019
http://www.artnews.com/2019/02/14/artsy-data-stolen-security-incident/

In an email sent to its users on Wednesday evening, the chief technology officer of Artsy—an online platform that offers views into the art world as well as works for sale for prices between “$100 to over $1,000,000,” as its website states—alerted users to “a data security incident that may have impacted your Artsy account data.”
The notice, signed by Artsy chief technology officer Daniel Doubrovkine, said the company believed that users’ names, emails, and IP addresses may have been among the data stolen.

In the interest of “an over-abundance of caution,” it advised users to change their passwords on Artsy as well as other sites that might share similar passwords, while stating that the site stores only password hashes (a type of incryption used for protection).
Reached for comment, a spokesperson for Artsy referred ARTnews to its original alert notice, which states that Artsy is investigating the matter.
Click to expand...

guest · Feb 15, 2019

mood said: ↑

620 million accounts across 16 'hacked' websites now for sale on dark web, seller claims
Dubsmash, Armor Games, 500px, Whitepages, ShareThis, and more allegedly up for grabs for $$$s in BTC
February 11, 2019
https://www.theregister.co.uk/2019/02/11/dark_web_hacked_accounts_for_sale/
Click to expand...

A Further 127 Million User Records Found For Sale on The Dark Web
February 15, 2019
https://latesthackingnews.com/2019/...ds-from-8-companies-for-sale-on-the-dark-web/

Earlier this week, this site reported an individual who was selling 620 million user records he claimed had stolen from 16 companies. It now appears that this individual has placed a further 127 million user records on The Dark Web for sale.
These records are currently for sale on the marketplace Dream Market where crooks buy and sell a variety of illegal products from user data to drugs and weapons.
Hacker Selling Data
The person selling the data goes by the name of Gnosticplayers. It is unclear if he is directly involved in stealing the data from there 24 companies, though he has claimed to have hacked the sites previously.

The latest 16 databases have now been taken off the market place and are no longer for sale. The individual involved, Gnosticplayers said he took them down after buyers complained that a prolonged sale would lead to some of these databases leaking online and becoming available to everyone.
Click to expand...

Minimalist · Feb 15, 2019

Data Breach Bonanza: Dating Apps, Equifax, Mass Credential Dumps

In a week full of cyber-incidents and marked by the Valentine’s Day holiday, data breach news was surging. Equifax may have been hacked by spies, two huge credential spills on the Dark Web did their part to endanger people online and several companies admitted to data exposures, data breaches and web vulnerabilities that threatened privacy. Plus, a facial-recognition company in China is collecting all kinds of information on random citizens, one researcher says.

Checkout our overview of the week’s data-exposure highlights (or low-lights, depending on your perspective), below.
Click to expand...

https://threatpost.com/data-breach-equifax-credential-dumps/

Minimalist · Feb 17, 2019

ClassPass, Gfycat, StreetEasy hit in latest round of mass site hacks

In just a week, a single seller put close to 750 million records from 24 hacked sites up for sale. Now, the hacker has struck again.

The hacker, whose identity isn’t known, began listing user data from several major websites — including MyFitnessPal, 500px and Coffee Meets Bagel, and more recently Houzz and Roll20 — earlier this week. This weekend, the hacker added a third round of data breaches — another eight sites, amounting to another 91 million user records — to their dark web marketplace.

To date, the hacker has revealed breaches at 30 companies, totaling about 841 million records.
Click to expand...

https://techcrunch.com/2019/02/16/classpass-gfycat-streeteasy-hacks/

Minimalist · Feb 17, 2019

Hacker puts up for sale third round of hacked databases on the Dark Web

A hacker going by the name of Gnosticplayers has put up for sale another set of hacked databases on a Dark Web marketplace.
Click to expand...

https://www.zdnet.com/article/hacke...rd-round-of-hacked-databases-on-the-dark-web/

guest · Feb 18, 2019

EyeEm and Animoto affected by major security breach – over 47 million accounts compromised
February 18, 2019
https://www.diyphotography.net/eyee...-breach-over-47-million-accounts-compromised/

Last night, I received an email from EyeEm about a “data security incident.” 22 million accounts have been compromised, exposing the users’ names, email addresses, and encrypted versions of passwords. However, EyeEm wasn’t the only victim of this data breach. It’s the same one that hit 500px, and it also affected 25 million users of Animoto.

EyeEm writes that they became aware of a data security incident only recently, despite the fact that it happened on 5 July 2018. In the email, it’s noted that the incident “did not affect any commercial or financial data, nor any of your payout information or photos.”
[...] their team “has been working around the clock to investigate the incident and secure the security of EyeEm users’ accounts.” They say that they immediately disabled all passwords as a security precaution and started informing the community.

So, if you use EyeEm, Animoto or any of the remaining hacked websites, go and change your password immediately. You can review EyeEm’s Privacy Policy here and contact their Support team or Data Privacy Protection Officer for more information.
Click to expand...

guest · Mar 4, 2019

Armor Games admits all its users' deets slurped in mega breach as site moves to repair chink
March 4, 2019
https://www.theregister.co.uk/2019/03/04/armor_games_breach_disclosure/

The company, which runs a portal for a bunch of browser-based games, did not speak to El Reg but cited our article in a confessional email to customers to say it was told on 29 January of a breach that occurred "around" the start of the month.
Thankfully, the data haul did not include first or last names, credit card data, addresses or phone numbers. But only because AG didn't hold that information in the database.

"Armor Games sincerely apologies for the inconvenience and concern this incident may cause, and remains committed to safeguarding the personal information in its care," it said.
The company claimed none of the data, part of the trove put up for sale in the Dream Market cybersouk, had been misused.
Click to expand...

guest · Mar 17, 2019

Minimalist said: ↑

Hacker puts up for sale third round of hacked databases on the Dark Web

https://www.zdnet.com/article/hacke...rd-round-of-hacked-databases-on-the-dark-web/
Click to expand...

Round 4: Hacker returns and puts 26Mil user records for sale on the Dark Web
Gnosticplayers returns with new user records, most of which he obtained by hacking companies last month
March 17, 2019
https://www.zdnet.com/article/round...-26mil-user-records-for-sale-on-the-dark-web/

A hacker who has previously put up for sale over 840 million user records in the past month, has returned with a fourth round of hacked data that he's selling on a dark web marketplace.

This time, the hacker has put up for sale the data of six companies, totaling 26.42 million user records, for which he's asking 1.2431 bitcoin ($4,940).
The hacker's name is Gnosticplayers, and since February 11 the hacker has put up for sale data for 32 companies in three rounds [stories on Round 1, Round 2, and Round 3] on Dream Market, a dark web marketplace.

The difference between Round 4 and the previous three rounds is that five of the six databases Gnosticplayers put up for sale were acquired during hacks that have taken place last month, February 2019.
Click to expand...

guest · Apr 15, 2019

A hacker has dumped nearly one billion user records over the past two months
Hacker Gnosticplayers has stolen over 932 million user records from 44 companies
April 15, 2019
https://www.zdnet.com/article/a-hac...illion-user-records-over-the-past-two-months/

The hacker's name is Gnosticplayers, and he's responsible for the hacks of 44 companies, including last week's revelations.

A hacker who spoke with ZDNet in February about wanting to put up for sale the data of over one billion users is getting dangerously close to his goal after releasing another 65.5 million records last week and reaching a grand total of 932 million records overall.
HACKER RELEASES ROUND 5
Last week, the hacker notified ZDNet about his latest release --Round 5-- containing the data of 65.5 million users, which the hacker claims to have taken from six companies: gaming platform Mindjolt, digital mall Wanelo, e-invitations and RSVP platform Evite, South Korean travel company Yanolja, women's fashion store Moda Operandi, and Apple repair center iCracked.

While ZDNet has reached out for comment to each of the named businesses, most of the hacker's previous 38 victims have confirmed hacks, so this new batch of stolen data is also very likely to be authentic as well.
Click to expand...

guest · May 26, 2020

mood said: ↑

Round 4: Hacker returns and puts 26Mil user records for sale on the Dark Web
Gnosticplayers returns with new user records, most of which he obtained by hacking companies last month
March 17, 2019
https://www.zdnet.com/article/round...-26mil-user-records-for-sale-on-the-dark-web/
Click to expand...

Lifebear – 3,670,561 breached accounts

Lifebear
In early 2019, the Japanese schedule app Lifebear appeared for sale on a dark web marketplace amongst a raft of other hacked websites. The breach exposed almost 3.7M unique email addresses, usernames and passwords stored as salted MD5 hashes. The data was provided to HIBP by a source who requested it be attributed to "nano@databases.pw".

Breach date: 28 February 2019
Date added to HIBP: 25 May 2020
Compromised accounts: 3,670,561
Compromised data: Email addresses, Passwords, Usernames
Permalink
Click to expand...

mood said: ↑

A Further 127 Million User Records Found For Sale on The Dark Web
February 15, 2019
https://latesthackingnews.com/2019/...ds-from-8-companies-for-sale-on-the-dark-web/
Click to expand...

PetFlow – 990,919 breached accounts

PetFlow
In December 2017, the pet care delivery service PetFlow suffered a data breach which consequently appeared for sale on a dark web marketplace. Almost 1M accounts were impacted and exposed email addresses and passwords stored as unsalted MD5 hashes. The data was provided to HIBP by a source who requested it be attributed to "nano@databases.pw".

Breach date: 9 December 2017
Date added to HIBP: 26 May 2020
Compromised accounts: 990,919
Compromised data: Email addresses, Passwords
Permalink
Click to expand...

guest · May 26, 2020

mood said: ↑

Artsy Alerts Users of Data-Security Breach; Report Claims Hacked Information for Sale
February 14, 2019
http://www.artnews.com/2019/02/14/artsy-data-stolen-security-incident/
Click to expand...

Artsy – 1,079,970 breached accounts

Artsy
In April 2018, the online arts database Artsy suffered a data breach which consequently appeared for sale on a dark web marketplace. Over 1M accounts were impacted and included IP and email addresses, names and passwords stored as salted SHA-512 hashes. The data was provided to HIBP by a source who requested it be attributed to "nano@databases.pw".

Breach date: 1 April 2018
Date added to HIBP: 25 May 2020
Compromised accounts: 1,079,970
Compromised data: Email addresses, IP addresses, Names, Passwords
Permalink
Click to expand...

guest · Jan 18, 2021

Minimalist said: ↑

Hacker puts up for sale third round of hacked databases on the Dark Web

https://www.zdnet.com/article/hacke...rd-round-of-hacked-databases-on-the-dark-web/
Click to expand...

Data has been added to Have I Been Pwned:

Jobandtalent – 10,981,207 breached accounts

Jobandtalent
In approximately February 2018, the employment website Jobandtalent suffered a data breach which then appeared for sale alongside other breaches a year later. The incident impacted 11 million subscribers and exposed their names, email and IP addresses and passwords stored as salted SHA-1 hashes.

Breach date: 1 February 2018
Date added to HIBP: 17 January 2021
Compromised accounts: 10,981,207
Compromised data: Email addresses, IP addresses, Names, Passwords
Permalink
Click to expand...

Log in or Sign up

620 million accounts across 16 'hacked' websites now for sale on dark web, seller claims

guest Guest

guest Guest

guest Guest

guest Guest

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

620 million accounts across 16 'hacked' websites now for sale on dark web, seller claims

guest Guest

guest Guest

guest Guest

guest Guest

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches