Account details for 4 million Quidd users shared on hacking forum

guest · Apr 14, 2020

Account details for 4 million Quidd users shared on hacking forum
Users of Quidd [...] are advised to change account passwords as soon as possible
April 14, 2020
https://www.zdnet.com/article/account-details-for-4-million-quidd-users-shared-on-hacking-forum/

Quidd, an online marketplace for trading stickers, cards, toys, and other collectibles, appears to have suffered a data breach in 2019, and the details of around four million users are now being shared for free on underground hacking forums.

The data, of which ZDNet has obtained samples from three different sources, contains Quidd usernames, email addresses, and hashed account passwords.
A HACKER KNOWN AS PROTAG BELIEVED TO BE BEHIND THE BREACH
Two different sources have told ZDNet that a hacker known as ProTag was the one who took credit for the breach and first put the Quidd data for sale.

In addition, ZDNet has also learned from a data trader that the Quidd information has been trading privately among high-level groups for months, with ads for the Quidd info being posted on hacking forums and Pastebin since at least October and December 2019, respectively.
Click to expand...

Quidd has not disclosed any recent security incident, and it is unclear if the company is aware of the breach. ZDNet contacted the company for comment and will update the article with any statement the company wants to make.
ZDNet has also obtained copies of the leaked data and reached out to some users to confirm that their details were correct.

Reversing bcrypt-protected passwords into their plaintext format is considered incredibly difficult and a time and resource-consuming operation.
Ironically, the use of the bcrypt algorithm is also very likely the reason why the Quidd data has leaked on public hacking forums in the first place.

"It's bcrypt, so it hasn't been in high demand really," a data trader told ZDNet today (quote edited for clarity).
Unfortunately, some hackers have now begun working on cracking the Quidd passwords.
Click to expand...

Risk Based Security: Nearly 4 Million Quidd User Credentials Stolen and Shared on Hacking Forum

guest · Jun 24, 2020

Data has been added to Have I Been Pwned:

Quidd – 3,805,863 breached accounts

Quidd
In 2019, online marketplace for trading stickers, cards, toys, and other collectibles Quidd suffered a data breach. The breach exposed almost 4 million users' email addresses, usernames and passwords stored as bcrypt hashes. The data was subsequently sold then redistributed extensively via hacking forums.

Breach date: 1 July 2019
Date added to HIBP: 24 June 2020
Compromised accounts: 3,805,863
Compromised data: Email addresses, Passwords, Usernames
Permalink
Click to expand...

Log in or Sign up

Account details for 4 million Quidd users shared on hacking forum

guest Guest

guest Guest

Log in or Sign up

Account details for 4 million Quidd users shared on hacking forum

guest Guest

guest Guest

Useful Searches