Clothing marketplace Poshmark confirms data breach

ronjor · Aug 1, 2019

Zack Whittaker@zackwhittaker 01 Aug 2019

Poshmark, an online marketplace for buying and selling clothes, has reported a data breach.
The company said in a brief blog post that user profile information, including names and usernames, gender and city data was taken by an “unauthorized third party.” Email addresses, size preferences, and scrambled passwords were also taken.
Click to expand...

guest · Sep 2, 2019

data has been added to Have I Been Pwned:
Poshmark – 36,395,491 breached accounts

Poshmark
In mid-2018, social commerce marketplace Poshmark suffered a data breach that exposed 36M user accounts. The compromised data included email addresses, names, usernames, genders, locations and passwords stored as bcrypt hashes. The data was provided to HIBP by a source who requested it be attributed to "JimScott.Sec@protonmail.com".

Breach date: 16 May 2018
Date added to HIBP: 2 September 2019
Compromised accounts: 36,395,491
Compromised data: Email addresses, Genders, Geographic locations, Names, Passwords, Usernames
Permalink
Click to expand...

guest · Sep 2, 2019

Cracked Passwords for Poshmark Accounts Being Sold Online
September 2, 2019
https://www.bleepingcomputer.com/ne...ords-for-poshmark-accounts-being-sold-online/

Dehashed login details for customers of Poshmark, an online marketplace for buying and selling used clothes and accessories, have been circulating online following the data breach a few months ago.
Cracked passwords available
It is unclear in what form it circulated at the beginning but the price tag suggests that the passwords were hashed. However, the other details, like email, geographic location, and gender could prove to be valuable information for spammers or malware distributors.
Scott told BleepingComputer that they saw cracked Poshmark accounts circulating online, about one million of them.

Of course, the price for dehashed accounts would increase significantly, as these can be used in credential stuffing attacks. As many users tend to ignore data breach security warnings, cybercriminals can even try the logins on Poshmark and hijack accounts.
Where available, two-factor authentication should be enabled, as it prevents hackers to log into your account with just the username and password.
Click to expand...

Log in or Sign up

Clothing marketplace Poshmark confirms data breach

ronjor Global Moderator

guest Guest

guest Guest

Log in or Sign up

Clothing marketplace Poshmark confirms data breach

ronjor Global Moderator

guest Guest

guest Guest

Useful Searches