Breach Disclosure: Chatbooks

The photo print service Chatbooks suffered a data breach in March 2020. According to BleepingComputer, this breach is part of a spree of leaks from a group of hackers that is now selling over 73 million user records from 11 companies. The stolen data included 15 million user records with 2.5 million unique email addresses alongside names, phone numbers, social media profiles and salted SHA-512 password hashes.

Recommendations

Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account.

Details

ChatBooks is a photo print service that provides an easy way to create photo books using Instagram and Facebook social media accounts as the source. A hacker group called ShinyHunters on May 3 started advertising ChatBooks user records on Empire market. The breach contained 15 million user records with 2.5 million unique email addresses alongside names, phone numbers, social media profiles and salted SHA-512 password hashes. According to the security breach notification sent to users, the company learned about the intrusion on May 5, 2020. After forensic investigation, it was discovered that the breach occurred on March 26.

Figure 1: Chatbooks data on sale on dark web forums

The leaked information includes:

Email address

Name

Phone number

Social media profile

Salted SHA-512 password hashes