New breach: Orange Romania had hundreds of thousands of email addresses breached and published this week. Data included phone number, subscription details and partial credit cards. 17% were already in @Have I Been Pwned. Read more:
BleepingComputer
Orange Group confirms breach after hacker leaks company documents
A hacker claims to have stolen thousands of internal documents with user records and employee data after breaching the systems of Orange Group, a l...
New stealer logs: 23B rows of "ALIEN TXTBASE" logs with 284M unique email addresses have been added to HIBP. New APIs can now search these by email domain and the domain of the website they were captured on. 69% were already in @Have I Been Pwned. Read more:
Troy Hunt
Processing 23 Billion Rows of ALIEN TXTBASE Stealer Logs
I like to start long blog posts with a tl;dr, so here it is: We've ingested a corpus of 1.5TB worth of stealer logs known as "ALIEN TXTBASE" into ...
New sensitive breach: Spyware service Spyic had almost 876k email addresses breached this month. The exploited vulnerability also granted access to captured messages, photos, call logs, and more. 46% were already in @Have I Been Pwned. Read more:
TechCrunch
Exclusive: Stalkerware apps Cocospy and Spyic are exposing phone data of millions of people
A bug in the Android and iPhone monitoring operations allows anyone to access private data exfiltrated from a victim's device.
New sensitive breach: Spyware service Cocospy had almost 1.8M email addresses breached this month. The exploited vulnerability also granted access to captured messages, photos, call logs, and more. 50% were already in @Have I Been Pwned. Read more:
TechCrunch
Exclusive: Stalkerware apps Cocospy and Spyic are exposing phone data of millions of people
A bug in the Android and iPhone monitoring operations allows anyone to access private data exfiltrated from a victim's device.
New breach: Storenvy was breached in 2019. 1.8M rows with cracked password hashes were posted publicly. The source breach included 23M rows with 11M unique email addresses & salted SHA-1 hashes, among other data. 54% were already in @Have I Been Pwned. More:
E-commerce firm StorEnvy hacked; 1.5m plain-text accounts leaked – Hackread – Cybersecurity News, Data Breaches, AI, and More
New sensitive breach: Yesterday, Doxbin was breached by "TOoDA" and 136k email addresses and associated usernames were publicly leaked. 46% were already in @Have I Been Pwned. Read more:
X (formerly Twitter)
vx-underground (@vxunderground) on X
Moments ago Doxbin was compromised. A group named "Tooda" has taken credit for the compromise. In summary, administrative staff from Doxbin got i...
New breach: Zacks allegedly had 12M email addresses breached last year in a separate incident to their 2022 breach. Date included name, IP and physical address, phone and unsalted SHA-256 password hash. 93% were already in @Have I Been Pwned. Read more:
A Threat Actor Claims to have Leaked the Data of Zacks Investment Research
New breach: GPS tracking service LandAirSea had 337k customer records breached last month. Data included name, email, partial credit card data and tracking device information. 75% were already in @Have I Been Pwned
Have I Been Pwned
Have I Been Pwned: Check if your email address has been exposed in a data breach
Have I Been Pwned allows you to check whether your email address has been exposed in a data breach.
New breach: Adopt Me Trading Values had 86k records breached in 2022. Data included email address, username (and Roblox username), IP address and bcrypt password hash. 27% were already in @Have I Been Pwned. Read more: https://cybernews.com/security/billions-passwords-credentials-leaked-mother-of-all-breaches/
New breach: Indonesian career platform Youthmanual had 938k email addresses breached in 2019. Data included name, date and place of birth, gender, phone number, physical address and salted SHA-1 password hash. 79% were already in @Have I Been Pwned. More:
The Hacker News
Round 4 — Hacker Puts 26 Million New Accounts Up For Sale On Dark Web
Exclusive: Hacker Puts 26 Million New Accounts from 6 Sites Up For Sale On Dark Web