Breach Disclosure: PiZap

In February 2019, prolific breach database seller Gnosticplayers listed databases from several popular websites, including photo editor PiZap, for sale on Dream Market. Leaked data includes user ID, hashed password, email address, and payment information and banking information related to a payment application called Onebip. In total, this database contained records for 92.76 million users.

Recommendations

If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account
Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
Remain alert to potential spear phishing attacks through email and social media.

Details

In February 2019, a database containing breach data related to popular online photo editor Pizap, as well as other popular sites, was posted for sale on the Dream Market dark web marketplace. This breach data contained records for 92.76 million users, with information including user ID, hashed password, and email address.