Breach Disclosure: WedMeGood

Early in January of 2021, the Indian wedding planning platform, WedMeGood, suffered a data breach exposing 1.3 million customers, consisting of 41.5 GB of stolen data. The prolific hacking group, ShinyHunters, have claimed responsbility for this breach and have uploaded it to various hacking forums, resulting in this database being shared across multiple forums.

Recommendations

Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks.
If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance.
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account.

Details

Although still not verified by WedMeGood, the supposed data of over 1.3 million users has been leaked online in various forums by the hacking group ShinyHunters. Sensitive user data consisting of the following was included in the data breach:

City
Gender
Full Name
Phone Number
Email Address
Password Hash
Booking Leads
Last Login Date
Account Creation Date
Facebook Unique ID Number
Vacation Description for Airbnb

Figure 1: Screenshot of ShinyHunters posting of WedMeGood database for free

In addition this to recent breach, WedMeGood was the victim of another data breach in October of 2020 resulting in the database being listed for sale on the same hacking forums as ShinyHunters posted on.