Breach Disclosure: Oxfam

Breach Disclosure: Oxfam Australia

On January 20th, 2021 Oxfam Australia had identified an unauthorized user gained access to one of its databases containing data on 1.8 million users. Information included names, email addresses, phone numbers, genders, birthdays, and in some cases, partial credit card numbers or banking data.

Recommendations

• Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
• If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
• If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account

Details

Oxfam Australia stated that the database included information about supporters who may have signed a petition, taken part in a campaign, or made donations or purchases through their shops. The data contained no passwords, however, for the majority of users contained the following:

• Names
• Addresses
• Date of birth
• Emails
• Phone Numbers
• Gender
• Donation history

The Oxfam database has been posted to hacking forums for free as of February 27th, 2021.

Figure 1: Database listing for free on hacking forum