Breach Disclosure: Utah Gun Exchange

A popular gun exchange website, Utah Gun Exchange, was involved in a breach in July 2020 exposing around 235,000 email addresses. Also included in this breach was usernames, IP addresses, genders and password hashes. Utah Gun Exchange acknowledged in their statement that "...criminals exploited a website vulnerability to gain access to certain data", however, it is not known what vulnerability was exploited or how at this time.

Recommendations

Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account.

Details

Luckily for users of the Utah Gun Exchange website, all financial data and transactions were handled through PayPal, preventing any financial data of customers ending up in the breach. With that, Utah Gun Exchange mentioned that most of the consumer information accessed is information that is already publicly available when an advertisement is posted, including names, email addresses, and phone numbers.

In addition to the Utah Gun Exchange directly, there were nearly 46,000 users from the company's UGETube video website also included in the breached data. However, many of the users appear to be spam accounts. Also included in the breach was 25,000 from Utah-based Deep Jungle Kratom, a herbal supplement company, and 16,000 users from the "Muley Freak" website, which sells hunting gear. There are claims by the hacker that all of these sites are related to the Utah Gun Exchange, which could indicate a more targeted attack against them specifically, however, Utah Gun Exchange dismisses those claims, and said that they are not related.

Figure 1: Breach data for Utah Gun Exchange posting on RaidForums