A RedDoorz database containing 5.8 million user records is being sold on a hacking forum – the company suffered a data breach in September.
RedDoorz is a Singapore-based hotel management & booking platform with over 1,000 properties across Southeast Asia. Using the website or mobile app, users can create an account to browse the most available budget hotels and make a reservation.
In late September 2020, RedDoorz revealed that it had suffered a data breach after an unauthorized individual accessed one of its databases . At that time, however, no RedDoorz financial information or passwords were exposed “to the company’s knowledge .”
5.8 million RedDoorz user records are being sold online
This week a hacker began selling a database containing 5.8 million user records that were stolen during the RedDoorz data breach.
As part of the sale, the threat actor shared a sample of the database, including the table structure and records of 587 users. These files allow us to see what data was exposed.
For each user record in the database, the following information about a RedDoorz member is exposed: bcrypt hashed passwords, full name, gender, link to profile photo, phone number, secondary phone number, date of birth , and occupation.
For several user records in the samples, BleepingComputer confirmed that the listed email addresses and phone numbers are correct for that user.
While this data breach exposed much more sensitive data than RedDoorz initially stated, it did not contain financial information.
What should RedDoorz users do?
To be safe, if you are a RedDoorz user, you should change your password immediately.
If you use the same password on other websites, you should also change the password on those websites to one that is unique and very strong for that website.
Using unique passwords on every website you have an account on is very important, as we have mentioned many times in the past.
It is recommended that you use a password manager to help you “remember” your passwords.
Source: bleepingcomputer.com
