Thursday, April 18, 2024

db8151dd – A Massive Unattributable Data Breach Leaked Tens of Millions of Records

Recently, a massive unattributable private data breach, codenamed as “db8151dd”, has exposed the data records of more than 22 million people, including the addresses, phone numbers, username, password, social media links.

At the moment, the source of this data still remains a mystery, and in this breach, 90 GB of personal information stolen.

According to the reports, a 9to5Mac analyst has received an email from “haveibeenpwned.com,” saying that “his personal data had been violated and it includes email addresses, job titles, phone numbers, addresses, and social media profile links.”

The Australian security expert, Troy Hunt who is the founder and manager of the “Have I Been Pwned” security blog, has stated on his blog, Troy Hunt, “despite my own experience on this subject and capabilities, my own information was stolen and made available in this file.

Even some of my particularly confidential information has also been made public, including the telephone number, that I have always been careful to protect to keep it as confidential as possible.”

Here’s what Troy Hunt stated, “Back in Feb, Dehashed reached out to me with a massive trove of data that had been left exposed on a major cloud provider via a publicly accessible Elasticsearch instance. It contained 103,150,616 rows in total,” while the first 30 of which look like this:-

“The global unique identifier beginning with “db8151dd” features heavily on these first lines hence the name I’ve given the breach. And I’ve had to give it this name because frankly, I’ve absolutely no idea where it came from, nor does anyone else I’ve worked on with this,” said the security expert, Troy Hunt.

Along with this data, the Australian security expert, Troy Hunt, has also found the data of the users with whom he interacted with in the past. He also identified the information relating to some appointments or reminders relating to future commitments, as if this information came directly from personal agendas.

The research on the origin of the file ends in nothing, as Troy Hunt assumes that a lot of this information comes directly from a CRM. As he clarified that even after confronting all his known colleagues and journalists, he has not been able to trace it back with certainty.

Moreover, the security researcher, Troy Hunt has uploaded over 20 million email addresses found in that file to HaveIBeenPwned, simply to ensure that you have not suffered the theft of sensitive data. What you have to do is just enter your email on that site, and it will automatically search the huge archive containing the information that is being stolen or data breach discovered to date and will inform you if and where your personal information is present.

To make it more clear, Troy Hunt has also stated that, “the database contains only email addresses, and ‘Have I been Pwned’ does not keep track of anything else.”

In case if you have been “Pwned,” then the best precautionary measure that you can take right now is, immediately change your passwords for each of your online accounts.

You can follow us on LinkedinTwitterFacebook for daily Cybersecurity and hacking news updates.

Website

Latest articles

Xiid SealedTunnel: Unfazed by Yet Another Critical Firewall Vulnerability (CVE-2024-3400)

In the wake of the recent disclosure of a critical vulnerability (CVE-2024-3400) affecting a...

Cerber Linux Ransomware Exploits Atlassian Servers to Take Full Control

Security researchers at Cado Security Labs have uncovered a new variant of the Cerber...

FGVulDet – New Vulnerability Detector to Analyze Source Code

Detecting source code vulnerabilities aims to protect software systems from attacks by identifying inherent...

North Korean Hackers Abuse DMARC To Legitimize Their Emails

DMARC is targeted by hackers as this serves to act as a preventative measure...

L00KUPRU Ransomware Attackers discovered in the wild

A new variant of the Xorist ransomware, dubbed L00KUPRU, has been discovered in the...

Oracle Releases Biggest Security Update in 2024 – 372 Vulnerabilities Are Fixed – Update Now!

Oracle has released its April 2024 Critical Patch Update (CPU), addressing 372 security vulnerabilities...

Outlook Login Panel Themed Phishing Attack Evaded All Antivirus Detections

Cybersecurity researchers have uncovered a new phishing attack that has bypassed all antivirus detections.The...

WAAP/WAF ROI Analysis

Mastering WAAP/WAF ROI Analysis

As the importance of compliance and safeguarding critical websites and APIs grows, Web Application and API Protection (WAAP) solutions play an integral role.
Key takeaways include:

  • Pricing models
  • Cost Estimation
  • ROI Calculation

Related Articles