A "data breach broker", ie a type of seller / broker who takes data from data breaches and sells them on Internet, has put up for sale databases belonging to 14 companies. According to the broker, the databases of these companies, which are now in hacking forums, were violated by hackers in recent months (2020).
When a company is violated, the hackers, they usually steal accessible databases. These bases data sold directly to others hacking groups. But hackers often use it brokers to sell them on their behalf in hacking forums or in general on the internet.
In the last month, a well-known and reliable broker has sold many databases in hacking forums, which, according to him, were obtained from data breaches that took place in 2020.
Each of the fourteen databases for sale contains different information, but all include usernames and hashed codes access.
The databases belong to companies that offer: game sites, food delivery services, streaming services, online fashion and loans.
According to the seller, prices for these databases start at $ 100. The most expensive can reach $ 1.100.
The companies that are alleged to have been violated are in the following table:
|Company||# of records||Alleged Breach Date|
|JamesDelivery||1.6 million||March 2020|
|Minted||4.3 million||May 2020|
|Playwings||4.1 million||April 2020|
|I reveal||1.1 million||June 2020|
|Tokopedia||91 million||April 2020|
|Yotepresto||1.4 million||June 2020|
|Zoosk||29.1 million||January 2020|
From the samples, data breaches seem legal, but the Companies have not confirmed any breach.
If they are real, however, selling them causes a lot of problems as well contain a total of 132.957.579 users. The information contained in these databases may be used for carrying out other attacks and frauds.
In addition, the broker sells databases of older companies, such as Star Tribune, EpicGames, ZyngaPoker, ReverbNation, Wirecard, ClickFunnels and many others.
If you have an account on any of the sites listed above, it's a good idea to change your password. If it has been used himself code and others sites you need to make the necessary changes there as well. Choose one unique and powerful code for all your accounts.