Hacker selling 368m users records stolen from 26 companies

Hacker selling 368m users records stolen from 26 companies

These websites include some notable ones such as Sitepoint.


In 2020, we saw hundreds of data breaches across different sectors with the most being done particularly by a threat actor named Shiny Hunter. With 2021 just starting, we have the news of another one albeit by a different actor this time.


The breach in question concerns the data of 26 companies and is being sold on an infamous blackhat forum.


These websites include some notable ones such as Sitepoint.com. However, it is worth noting that the data breaches of 21 of these websites are already known and only 7 of them are new ones.


[See: Ledger data breach: Hacker leaks stolen database on hacker forum]


Furthermore, interested buyers can purchase the data of individual databases after reviewing samples rather than all of them in amounts ranging from $1800-$4000 through Bitcoin.

On the other hand, it is important to recognize that the data involved is huge and is estimated to number over 368 million users records endangering a lot of people.


As for the security of the databases, various encryption methods were used such as MD5 and SHA512 while some were in plaintext or had no password.



List of allegedly breached websites along with sample data offered by the hacker (Image: Hackread)



Analyzing the newly breached websites, BleepingComputer talked to various of them amongst which MyON.com ..

Support the originator by clicking the read the rest link below.