Breach Disclosure: Hurb

On 23 July 2020, Hurb, one of the largest online travel agencies in Brazil, had contents of their internal database leaked on popular hacking and cybercrime forum RaidForums. The data breach broker, ShinyHunters, posted the breach for approximately 2 Euros. The breach contains 20,728,250 rows of user data, which include usernames, unsalted MD5 passwords and email addresses.

Recommendations

Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account

Details

ShinyHunters has been posting a number of breaches in late July. This specific breach is serious due to the use of the MD5 cryptographic hashing algorithm, as well as lack of password salts for users, which makes cracking the passwords trivial.

Figure 1: ShinyHunters Post