- Joined
- Jun 13, 2020
- Messages
- 8,171
- Reaction score
- 1,192
- Points
- 212
- Awards
- 2
Hacker KryptonZambie launches Black Friday on Cybercriminal Forum.
Over 183 million records containing contact information and employment details have been stolen from a data broker and are being sold on the dark web. The seller, using the nickname KryptonZambie, has listed the data for $6,000 on one of the cybercriminal forums. As a sample, potential buyers are offered 100,000 records. According to the seller, the leak includes corporate email addresses, physical addresses, phone numbers, employer names, job titles and links to profiles on LinkedIn and other social media platforms.
It's believed that the information was collected from Pure Incubation, now known as DemandScience. The company has confirmed that it's aware of the sale of its data and explained that the leaked information consists of business contacts that are already publicly available. According to DemandScience, the company only processes public business contacts and doesn't store personal data such as passwords, home addresses or other sensitive information. The company also assures that the data leak wasn't related to a compromise of its systems. Earlier this year, the company learned of a post on a hacker forum claiming that data had been stolen from outdated systems of Pure Incubation. However, the investigation found no evidence of a breach in the infrastructure. Nevertheless, the company acknowledges the possibility of outdated data being leaked through one of its partners, although there is no direct evidence to support this.
The data breach tracking resource Have I Been Pwned (HIBP) has confirmed the incident and added the leak to its registry. According to HIBP, the breach affected at least 122 million unique email addresses previously collected by Pure Incubation. HIBP founder Troy Hunt also examined the data and found his own contacts among them, including an old email and incorrect job information. Hunt stated that one of the individuals affected by the leak contacted DemandScience and was informed that the data leak occurred from a system that was decommissioned two years ago.
*a screenshot of KryptonZambie's post, which claims that 183.7 million records are up for sale.