Epik data breach impacts 15 million users, including non-customers

guest · Sep 20, 2021

Epik data breach impacts 15 million users, including non-customers
Scraped WHOIS data of NON-Epik customers also exposed in the 180 GB leak.
September 20, 2021
https://arstechnica.com/information...cts-15-million-users-including-non-customers/

Epik has now confirmed that an "unauthorized intrusion" did in fact occur into its systems. The announcement follows last week's incident of hacktivist collective Anonymous leaking 180 GB of data stolen from online service provider Epik. To mock the company's initial response to the data breach claims, Anonymous had altered Epik's official knowledge base, as reported by Ars.

Epik is a domain registrar and web services provider known to serve right-wing clients, some of which have been turned down by more mainstream IT providers due to the objectionable and sometimes illicit content hosted by the clients. Epik's clients have included the Texas GOP, Parler, Gab, and 8chan, among others.
Click to expand...

Epik hack impacts millions of non-customers, too
Turns out, the leaked data dump contains 15,003,961 email addresses belonging to both Epik's customers and non-customers, and not everyone is pleased with the news. This occurred as Epik had scraped WHOIS records of domains, even those not owned by the company, and stored these records. In doing so, the contact information of those who have never transacted with Epik directly was also retained in Epik's systems.

Data breach monitoring service HaveIBeenPwned has now begun sending out alerts to millions of email addresses exposed in the Epik hack. The service's founder, Troy Hunt, is one of the many impacted by the data breach but who "had absolutely nothing to do with Epik."
Click to expand...

Epik confirms data breach, emails impacted people
Epik has confirmed the breach and is also emailing the impacted parties about an "unauthorized intrusion," according to screenshots shared by data scientist Emily Gorcenski and cybersecurity expert Adam Sculthorpe:
Click to expand...

guest · Sep 30, 2021

Anonymous Leaks Epik Data - Again
Part 2 of 'Operation Epik Fail' Leaks 300GB of Data, Researcher Says
September 30, 2021
https://www.databreachtoday.com/anonymous-leaks-epik-data-again-a-17655

Hacktivist collective Anonymous has, for the second time this month, leaked data belonging to Washington-based domain name registrar and web hosting service Epik, according to independent Texas journalist Steven Monacelli.

Anonymous says the second set of leaked data, which they call The/b/Sides, is "larger than the first" and contains 300GB of information, according to Monacelli, who cites an unidentified security researcher who he says vetted the data set.

BREAKING: hacktivists with Anonymous release a second round of data from the Epik hack. A security researcher who was able to verify the extent of the leak to me described it as "a complete own." At over 300 gigabytes worth of data, this leak is larger than the first.
— steven monacelli  (@stevanzetti) September 29, 2021
Click to expand...

The hacktivists have also attached "several bootable disk images of assorted systems" in the form of a 70GB torrent file with the press release, according to news agency Daily Dot, which first reported the story.

The publication adds that the leak exposes at least 59 API keys and scores of login credentials that not only include keys to the locks of Epik's own systems, but also to the company's Twitter, Coinbase and PayPal accounts.
Click to expand...

guest · Oct 6, 2021

Anonymous Leaks Data from Texas GOP
This Is the 3rd Attack Involving the US Web Hosting Service Epik
October 6, 2021
https://www.databreachtoday.com/anonymous-leaks-data-from-texas-gop-a-17679

Hacktivist collective Anonymous has for the third time carried out an attack involving Washington-based domain name registrar and web hosting service Epik, according to independent Texas journalist Steven Monacelli, who also broke the news on the past two instances (see: Anonymous Leaks Epik Data - Again).

This time around, the group has leaked data belonging to one of Epik's customers, the Republican Party of Texas - aka the Texas GOP, according to Monacelli. The leaked data set, he says, citing a post from Anonymous, contains sensitive information from the GOP's data backup servers, including private documents, database, and draft articles that were never published, among other things.

Titled "You Lost The Game," the latest set of data leaks, according to the tweet, was published on Monday in a forum. In the post,
Click to expand...

A Texas GOP spokesperson tells Information Security Media Group that the incident has been reported to the FBI and is currently under investigation. "The reported leak of information stems from a Sept. 13, 2021, attack on Epik, the website hosting provider, that was being used by numerous organizations including the Republican Party of Texas," the spokesperson says.

Security researchers WhiskeyNeon and INIT_3, who verified the previous leaks, were not immediately available for comment.
Click to expand...

Log in or Sign up

Epik data breach impacts 15 million users, including non-customers

guest Guest

guest Guest

guest Guest

Log in or Sign up

Epik data breach impacts 15 million users, including non-customers

guest Guest

guest Guest

guest Guest

Useful Searches