Booking management platform FlexBooker leaks 3.7 million user records

guest · Jan 6, 2022

January 6, 2022

FlexBooker, a company that provides a cloud-based online scheduling and booking service, has exposed the personal details of more than 3.7 million users.

The incident took place in December 2021 after a threat actor compromised one of the company’s Amazon Web Services (AWS) accounts, according to Australian security researcher Troy Hunt.
Click to expand...

The threat actor used the account to collect 9.5 million records from the company’s AWS infrastructure, data that was eventually leaked online on a forum dedicated to trading hacked data.

Hunt, who operates Have I Been Pwned, a service that indexes hacked data, said that he received a copy of the stolen files, which turned out to contain information on more than 3.7 million unique users.

New breach: Online booking service FlexBooker had 3.7M accounts breached last month. Data included email addresses, names, phone numbers and for some accounts, partial credit card data. 69% were already in @haveibeenpwned https://t.co/LGaAnj1hUA
— Have I Been Pwned (@haveibeenpwned) January 6, 2022
Click to expand...

According to Hunt, this data contained real names, email addresses, phone numbers, and for a small number of accounts, password hashes and partial credit card information.
Click to expand...

Data has been added to Have I Been Pwned:

FlexBooker – 3,756,794 breached accounts

FlexBooker
In December 2021, the online booking service FlexBooker suffered a data breach that exposed 3.7 million accounts. The data included email addresses, names, phone numbers and for a small number of accounts, password hashes and partial credit card data. FlexBooker has identified the breach as originating from a compromised account within their AWS infrastructure. The data was found being actively traded on a popular hacking forum and was provided to HIBP by a source who requested it be attributed to "white_peacock@riseup.net".

Breach date: 23 December 2021
Date added to HIBP: 6 January 2022
Compromised accounts: 3,756,794
Compromised data: Email addresses, Names, Partial credit card data, Passwords, Phone numbers
Click to expand...

Log in or Sign up

Booking management platform FlexBooker leaks 3.7 million user records

guest Guest

Log in or Sign up

Booking management platform FlexBooker leaks 3.7 million user records

guest Guest

Useful Searches