db8151dd – A Massive Unattributable Data Breach Leaked Tens of Millions of Records

Recently, a massive unattributable private data breach, codenamed as “db8151dd”, has exposed the data records of more than 22 million people, including the addresses, phone numbers, username, password, social media links.

At the moment, the source of this data still remains a mystery, and in this breach, 90 GB of personal information stolen.

According to the reports, a 9to5Mac analyst has received an email from “haveibeenpwned.com,” saying that “his personal data had been violated and it includes email addresses, job titles, phone numbers, addresses, and social media profile links.”

The Australian security expert, Troy Hunt who is the founder and manager of the “Have I Been Pwned” security blog, has stated on his blog, Troy Hunt, “despite my own experience on this subject and capabilities, my own information was stolen and made available in this file.

Even some of my particularly confidential information has also been made public, including the telephone number, that I have always been careful to protect to keep it as confidential as possible.”

Here’s what Troy Hunt stated, “Back in Feb, Dehashed reached out to me with a massive trove of data that had been left exposed on a major cloud provider via a publicly accessible Elasticsearch instance. It contained 103,150,616 rows in total,” while the first 30 of which look like this:-

“The global unique identifier beginning with “db8151dd” features heavily on these first lines hence the name I’ve given the breach. And I’ve had to give it this name because frankly, I’ve absolutely no idea where it came from, nor does anyone else I’ve worked on with this,” said the security expert, Troy Hunt.

Along with this data, the Australian security expert, Troy Hunt, has also found the data of the users with whom he interacted with in the past. He also identified the information relating to some appointments or reminders relating to future commitments, as if this information came directly from personal agendas.

The research on the origin of the file ends in nothing, as Troy Hunt assumes that a lot of this information comes directly from a CRM. As he clarified that even after confronting all his known colleagues and journalists, he has not been able to trace it back with certainty.

Moreover, the security researcher, Troy Hunt has uploaded over 20 million email addresses found in that file to HaveIBeenPwned, simply to ensure that you have not suffered the theft of sensitive data. What you have to do is just enter your email on that site, and it will automatically search the huge archive containing the information that is being stolen or data breach discovered to date and will inform you if and where your personal information is present.

To make it more clear, Troy Hunt has also stated that, “the database contains only email addresses, and ‘Have I been Pwned’ does not keep track of anything else.”

In case if you have been “Pwned,” then the best precautionary measure that you can take right now is, immediately change your passwords for each of your online accounts.

You can follow us on LinkedinTwitterFacebook for daily Cybersecurity and hacking news updates.

Priya James

Recent Posts

How to Analyse .NET Malware? – Reverse Engineering Snake Keylogger

Utilizing sandbox analysis for behavioral, network, and process examination provides a foundation for reverse engineering .NET malware.  The write-up outlines…

12 mins ago

GoPlus’s Latest Report Highlights How Blockchain Communities Are Leveraging Critical API Security Data To Mitigate Web3 Threats

GoPlus Labs, the leading Web3 security infrastructure provider, has unveiled a groundbreaking report highlighting the growing, widespread use and potential…

13 hours ago

C2A Security’s EVSec Risk Management and Automation Platform Gains Automotive Industry Favor as Companies Pursue Regulatory Compliance

In 2023, C2A Security added multiple OEMs and Tier 1s to its portfolio of customers, successful evaluations, and partnerships such…

15 hours ago

Wireshark 4.2.4 Released: What’s New!

Wireshark stands as the undisputed leader, offering unparalleled tools for troubleshooting, analysis, development, and education. The latest update, Wireshark 4.2.4,…

17 hours ago

Zoom Unveils AI-Powered All-In-One AI Work Workplace

Zoom has taken a monumental leap forward by introducing Zoom Workplace, an all-encompassing AI-powered platform designed to redefine how we…

17 hours ago

iPhone Users Beware! Darcula Phishing Service Attacking Via iMessage

Phishing allows hackers to exploit human vulnerabilities and trick users into revealing sensitive information and grant unauthorized access. It's an…

18 hours ago