{"id":23840,"date":"2024-01-31T14:10:22","date_gmt":"2024-01-31T22:10:22","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2024\/01\/31\/news-17570\/"},"modified":"2024-01-31T14:10:22","modified_gmt":"2024-01-31T22:10:22","slug":"news-17570","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2024\/01\/31\/news-17570\/","title":{"rendered":"Mother of all Breaches may contain NEW breach data"},"content":{"rendered":"\n

On January 23, 2024, we reported on the discovery of billions of exposed records online, now commonly referred to as the \u201cmother of all breaches<\/a>\u201d (MOAB).<\/p>\n

Since then, the source of the dataset has been identified as data breach search engine Leak-Lookup.<\/p>\n

Prevention platform SpyCloud<\/a> compared the MOAB data with its own recaptured dataset and found at least 94% of the data was either public, old, or otherwise widely-known. That leaves a lot of new records.<\/p>\n

From SpyCloud’s blog:<\/p>\n

\n

“a small number of individual breaches totaling a large number of records \u2013 approximately 1.6 billion \u2013 appeared distinct, as compared to SpyCloud\u2019s dataset.”<\/p>\n<\/blockquote>\n

SpyCloud was able to attribute some data to what it calls \u201cprivate sale breaches\u201d, which are datasets that were sold privately or otherwise traded outside of the public space.<\/p>\n

As Troy Hunt of HaveIBeenPwned pointed out<\/a> on his blog, there is a data breach “personal stash” ecosystem. This consists of personal stashes of data breaches existing all over the place, fueling an exchange ecosystem that creates copies of billions of records of personal data over and over again.<\/p>\n

\n

\u201cThe data of a significant portion of the global internet-using population, just freely flowing backwards and forwards not just in the shady corners of the dark web<\/a> but traded out there in the clear on mainstream websites.\u201d<\/p>\n<\/blockquote>\n

These shady services, Hunt says, allow interested parties, including criminals, to access records that contain usernames, passwords (including in clear text), email addresses, and IP addresses. And Hunt says he feels that Leak-Lookup is one of the \u201cbad\u201d guys for the following reasons:<\/p>\n

    \n
  1. After purchasing access, it returns extensive personal information exposed in data breaches including names, email addresses, usernames, phone numbers, and passwords.<\/li>\n
  2. The operator is clearly trying to remain anonymous with no discoverable information about who is running it.<\/li>\n
  3. It has Terms of Service that include: You may only use this service for your own personal security and research. But it does nothing to enforce that restriction.<\/li>\n<\/ol>\n

    What worries me even more is the amount of buyers and brokers for breach data. I, for one, never realized there were so many of them. That’s regardless of whether they are there to sell data to anyone that is willing to pay, or only offer it to those that rightfully own the data.<\/p>\n

    This in itself constitutes multiple risks. As we all learned in economics, demand drives up the price and the higher the price the more attractive it becomes to go after the data. And, as the MOAB breach clearly demonstrated, not everyone is as careful as they should be about accidentally exposing their collection.<\/p>\n

    And it’s not just cybercriminals that are buying this type of data. US Senator Ron Wyden released documents<\/a> confirming the National Security Agency buys Americans\u2019 internet records, which can reveal which websites they visit and what apps they use, despite a recent FTC order saying that data brokers must obtain Americans\u2019 informed consent before selling their data.\u00a0<\/p>\n

    If you want to find out if your data is exposed online, you can try our free Digital Footprint scan<\/a>. Fill in the email address you\u2019re curious about (it’s best to submit the one you most frequently use) and we’ll send you a report.<\/p>\n

    \n
    \n
    \n

    SCAN NOW<\/a><\/p>\n<\/div>\n<\/div>\n<\/div>\n

    \n

    We don’t just report on threats – we help safeguard your entire digital identit<\/strong>y<\/p>\n

    Cybersecurity risks should never spread beyond a headline. Protect your\u2014and your family’s\u2014personal information by using\u00a0Malwarebytes Identity Theft Protection<\/a>.<\/p>\n

    https:\/\/blog.malwarebytes.com\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

    The MOAB may not be just recycled data after all. <\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10488,10378],"tags":[11172,25214,30763,32,26699,5897,26016],"class_list":["post-23840","post","type-post","status-publish","format-standard","hentry","category-malwarebytes","category-security","tag-data-breach","tag-haveibeenpwnd","tag-moab","tag-news","tag-personal","tag-privacy","tag-spycloud"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/23840","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=23840"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/23840\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=23840"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=23840"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=23840"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}