Threat actor leaked data for U.S. gun exchange site on hacking forum

guest · Aug 14, 2020

Threat actor leaked data for U.S. gun exchange site on hacking forum
August 14, 2020
https://securityaffairs.co/wordpress/107124/data-breach/us-gun-exchange-data-breach.html

On August 10th, a hacker has leaked online the databases of Utah-based gun exchange for free on a cybercrime forum.

According to the experts at cybersecurity intelligence firm Cyble, the leaked databases were hosted on the same Amazon AWS server.
The leaked data includes login names, hashed passwords, and email addresses.

BleepingComputer, who received the data from Cyble, confirmed that many of the email addresses listed in the databases belong to registered users of the sites.
Click to expand...

It is not confirmed that all of the leaked data is legitimate, anyway, experts suggest users change their password immediately.
Users that share the password at another site should also change the password
Click to expand...

guest · Aug 19, 2020

Data has been added to Have I Been Pwned:

Utah Gun Exchange – 235,233 breached accounts

Utah Gun Exchange
In July 2020, the Utah Gun Exchange website suffered a data breach which included several other associated websites. In total, 235k unique email addresses were exposed before being traded online alongside names, usernames, genders, IP addresses and password hashes. The data was provided to HIBP by breachbase.pw.

Breach date: 17 July 2020
Date added to HIBP: 19 August 2020
Compromised accounts: 235,233
Compromised data: Email addresses, Genders, IP addresses, Passwords, Usernames
Permalink
Click to expand...

guest · Aug 19, 2020

Gun exchange site confirms data breach after database posted online
August 19, 2020
https://www.bleepingcomputer.com/ne...rms-data-breach-after-database-posted-online/

08/19 update added below. This post was originally published on August, 13th, 2020.

On August 10th, a threat actor posted databases that they claim contain 195,000 user records for the utahgunexchange.com, 45,000 records for their video site, 15,000 records from the hunting site muleyfreak.com, and 24,000 user records from the Kratom site deepjunglekratom.com.
We were able to confirm that many of the email addresses listed in the databases belong to registered users of the sites.
Click to expand...

Update 8/19/20: After alerting the Utah Gun Exchange to their exposed data, today, they contacted BleepingComputer with a link to a data breach notification posted on their site.

This notification confirms our report that a threat actor stole their database and that it consisted of user's email addresses, login names, and hashed passwords.
UGE stressed that no financial information, including PayPal and credit card information, was exposed during this attack.

As we know, there are many who have attacked, or will attack, Utah Gun Exchange and UGETube in an effort to stop us from accomplishing our mission to help protect your constitutional rights. We have recently learned of one such attack that affects you as our users," Utah Gun Exchange stated in their data breach notification.
In our experience covering data breaches, it is more likely that the threat actor stumbled on their unsecured site and breached it without regard to the site's content.
Click to expand...

Utah Gun Exchange is asking all users to reset their passwords on utahgunexchange.com, and if they use the same passwords at other sites, to change them there as well.
As the databases for muleyfreak.com and deepjunglekratom.com are also hosted on the same AWS server, it is strongly advised that you reset your passwords on these sites as well.
Click to expand...

Log in or Sign up

Threat actor leaked data for U.S. gun exchange site on hacking forum

guest Guest

guest Guest

guest Guest

Log in or Sign up

Threat actor leaked data for U.S. gun exchange site on hacking forum

guest Guest

guest Guest

guest Guest

Useful Searches