Breach Disclosure: Mashable

Breach Disclosure: Mashable

The technolody and culture news website, Mashable, has suffered a data breach, impacting over 500,000 users. This data breach was put up for sale on a popular hacker forum. The leaked data contains full names, locations, email addresses, genders, IP addresses, and links to social media profiles of users.

Recommendations

• Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
• If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
• If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account

Details

The hacker under the alias of ShinyHunters has stolen the customer data belonging to Mashable and posted it for sale on a popular hacker forum. According to the ad placed on the hacker forum, there is data on over 500,000 users which includes:

• Email Addresses
• User Agents
• IP Addresses
• Oauth Tokens
• First Names
• Last Names
• Geographical Locations
• Social Links
• Interests
• Dates of birth

Mashable have issued a statement on the incident ensuring users that no password or financial data has been compromised. The amount of information contained on each individual however could lead to spear-phishing attacks targeting an individuals interests, or using their personal details in order to gain trust in the sender.

Figure 1: Mashable database ad on a popular hacker forum.

Figure 2: Excerpt of the breached data.

The threat actor which authored the thread known as "ShinyHunters" has recently been involved in multiple other data breaches and subsequent selling of customer data and has gathered a reputable status within the marketplace.