Tuesday, February 11, 2025
Homecyber securitydb8151dd - A Massive Unattributable Data Breach Leaked Tens of Millions of...

db8151dd – A Massive Unattributable Data Breach Leaked Tens of Millions of Records

Published on

SIEM as a Service

Follow Us on Google News

Recently, a massive unattributable private data breach, codenamed as “db8151dd”, has exposed the data records of more than 22 million people, including the addresses, phone numbers, username, password, social media links.

At the moment, the source of this data still remains a mystery, and in this breach, 90 GB of personal information stolen.

According to the reports, a 9to5Mac analyst has received an email from “haveibeenpwned.com,” saying that “his personal data had been violated and it includes email addresses, job titles, phone numbers, addresses, and social media profile links.”

The Australian security expert, Troy Hunt who is the founder and manager of the “Have I Been Pwned” security blog, has stated on his blog, Troy Hunt, “despite my own experience on this subject and capabilities, my own information was stolen and made available in this file.

Even some of my particularly confidential information has also been made public, including the telephone number, that I have always been careful to protect to keep it as confidential as possible.”

Here’s what Troy Hunt stated, “Back in Feb, Dehashed reached out to me with a massive trove of data that had been left exposed on a major cloud provider via a publicly accessible Elasticsearch instance. It contained 103,150,616 rows in total,” while the first 30 of which look like this:-

“The global unique identifier beginning with “db8151dd” features heavily on these first lines hence the name I’ve given the breach. And I’ve had to give it this name because frankly, I’ve absolutely no idea where it came from, nor does anyone else I’ve worked on with this,” said the security expert, Troy Hunt.

Along with this data, the Australian security expert, Troy Hunt, has also found the data of the users with whom he interacted with in the past. He also identified the information relating to some appointments or reminders relating to future commitments, as if this information came directly from personal agendas.

The research on the origin of the file ends in nothing, as Troy Hunt assumes that a lot of this information comes directly from a CRM. As he clarified that even after confronting all his known colleagues and journalists, he has not been able to trace it back with certainty.

Moreover, the security researcher, Troy Hunt has uploaded over 20 million email addresses found in that file to HaveIBeenPwned, simply to ensure that you have not suffered the theft of sensitive data. What you have to do is just enter your email on that site, and it will automatically search the huge archive containing the information that is being stolen or data breach discovered to date and will inform you if and where your personal information is present.

To make it more clear, Troy Hunt has also stated that, “the database contains only email addresses, and ‘Have I been Pwned’ does not keep track of anything else.”

In case if you have been “Pwned,” then the best precautionary measure that you can take right now is, immediately change your passwords for each of your online accounts.

You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity and hacking news updates.

Latest articles

Authorities Seize 8Base Ransomware Dark Web Site, Arrest Four Key Operators

Thai authorities arrested four European hackers in Phuket on February 10, 2025, for their...

12,000+ KerioControl Firewalls Exposed to 1-Click RCE Attack

Cybersecurity researchers caution that over 12,000 instances of GFI KerioControl firewalls remain unpatched and...

Apple iOS 0-day Vulnerability Exploited Wild in Extremely Sophisticated Attack

Apple has released emergency security updates to address a zero-day vulnerability, CVE-2025-24200, that has...

SHA256 Hash Calculation from Data Chunks

The SHA256 algorithm, a cryptographic hash function, is widely used for securing data integrity...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

Apple iOS 0-day Vulnerability Exploited Wild in Extremely Sophisticated Attack

Apple has released emergency security updates to address a zero-day vulnerability, CVE-2025-24200, that has...

SHA256 Hash Calculation from Data Chunks

The SHA256 algorithm, a cryptographic hash function, is widely used for securing data integrity...

New Report of of 1M+ Malware Samples Show Application Layer Abused for Stealthy C2

A recent analysis of over one million malware samples by Picus Security has revealed...