Breach Disclosure: filmai.in

Breach Disclosure: Filmai.in

Filmai.in, a popular illegal movie streaming platform experienced a data breach between 2019 and 2020, with the data now being publicly available for users to download on popular hacker forums. The breached data contains over 640,000 unique email addresses, along with usernames and passwords.

Recommendations

• Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
• If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
• If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account

Details

The breach was listed for download on a well known hacker forum by the user Slaap on February 19th 2021. They list the estimated time of the breach along with the total number of compromised credentials.

Figure 1: Breach advertisement on RaidForums

In total the breach contains 645,974 records containing:

• Email addresses
• Usernames
• Clear-text passwords

Due to the nature of this service, users' personal information could be used in subsequent spear-phishing attacks extorting them with this data or impersonating law enforcement. However, some users on the forum have noted that some of the data appears to be older than 2019, and due to decreasing traffic to the site many accounts are no longer in use or hold out of date email addresses and passwords.