A “data breach broker,” a type of seller/broker who takes data from data breaches and sells it online, has put up for sale databases belonging to 14 companies. According to the broker, the databases of these companies, which are now on hacking forums, were breached by hackers in recent months (2020).
When a company is breached, hackers typically steal accessible databases. These databases are sold directly to other hacking groups. However, hackers often use brokers to sell them on their behalf on hacking forums or on the internet in general.
In the last month, a well-known and reputable broker has been selling several databases on hacking forums, which he claims were obtained from data breaches that took place in 2020.
Each of the fourteen databases being sold contains different information, but all include usernames and hashed passwords.
The databases belong to companies that offer: game sites, food delivery services, streaming services, online fashion and loans.
Of the 14 companies, only four were known to have been hacked in the past. These are HomeChef, Minted, Tokopedia , and Zoosk.
According to the seller, prices for these databases start at $100. The most expensive ones can go up to $1,100.
The companies that have allegedly been breached are listed in the table below:
| Company | # of records | Alleged Breach Date |
| DarkThrone | 282,825 | June 2020 |
| Efun | 2.2 million | 2020 |
| Fluke | 353,321 | June 2020 |
| Footers | 209,783 | June 2020 |
| HomeChef | 8 million | 2020 |
| JamesDelivery | 1.6 million | March 2020 |
| KitchHike | 115,480 | June 2020 |
| CreditPlus | 896,170 | June 2020 |
| Minted | 4.3 million | May 2020 |
| Playwings | 4.1 million | April 2020 |
| Reveal | 1.1 million | June 2020 |
| Tokopedia | 91 million | April 2020 |
| Yotepresto | 1.4 million | June 2020 |
| Zoosk | 29.1 million | January 2020 |
From the samples, the data breaches appear legitimate, but the companies have not confirmed any breach.
If they are real, however, their sale causes many problems, as they contain a total of 132,957,579 users' data. The information contained in these databases can be used to carry out other attacks and scams.
In addition, the broker sells databases from past breaches of companies such as the Star Tribune, EpicGames, ZyngaPoker, ReverbNation, Wirecard, ClickFunnels and many others.
If you have an account on any of the sites listed above, it's a good idea to change your password. If the same password on other sites , you should make the necessary changes there as well. Choose a unique and strong password for all your accounts.
