Data of 24.3 million Lumin PDF users shared on hacking forum

guest · Sep 16, 2019

Data of 24.3 million Lumin PDF users shared on hacking forum
The person who leaked the data claims it notified Lumin PDF earlier this year but got no reply
September 16, 2019
https://www.zdnet.com/article/data-of-24-3-million-lumin-pdf-users-shared-on-hacking-forum/

The details of over 24.3 million Lumin PDF users have been shared today on a hacking forum, ZDNet has learned from a source.
The hacker said they leaked the company's data after Lumin PDF administrators failed to answer his queries multiple times over the past few months.

Lumin PDF is a little-known cloud-based service that lets users view, edit, and share PDF files using a web-based dashboard, inside a browser extension, or via the company's mobile apps.
The hacker's download link is for a 2.25GB ZIP file that holds a 4.06GB CSV file containing the user records of 24,386,039 LuminPDF users.

"The unprotected database was found about 5 months ago," the hacker wrote. "Vendor was contacted multiple times, but ignored all the queries.
[...] the most dangerous part of this leak is the presence of Google access tokens in the leaked data. These access tokens can allow malicious threat actors to pose as legitimate users and access Google Drive accounts.
Click to expand...

guest · Sep 18, 2019

data has been added to Have I Been Pwned:
Lumin PDF – 15,453,048 breached accounts

In April 2019, the PDF management service Lumin PDF suffered a data breach. The breach wasn't publicly disclosed until September when 15.5M records of user data appeared for download on a popular hacking forum. The data had been left publicly exposed in a MongoDB instance after which Lumin PDF was allegedly been "contacted multiple times, but ignored all the queries". The exposed data included names, email addresses, genders, spoken language and either a bcrypt password hash or Google auth token. The data was provided to HIBP by a source who requested it be attributed to "JimScott.Sec@protonmail.com".

Breach date: 1 April 2019
Date added to HIBP: 18 September 2019
Compromised accounts: 15,453,048
Compromised data: Auth tokens, Email addresses, Genders, Names, Passwords, Spoken languages, Usernames
Click to expand...

Log in or Sign up

Data of 24.3 million Lumin PDF users shared on hacking forum

guest Guest

guest Guest

Log in or Sign up

Data of 24.3 million Lumin PDF users shared on hacking forum

guest Guest

guest Guest

Useful Searches