Breach Disclosure: Yam

In 2013, Taiwainese video website, Yam, suffered a data breach in which 13 million records were exposed. The breach involved the exposure of email addresses, usernames, physical addresses, date of birth, and unsalted MD5 hashed passwords. The leaked data was posted on cybercriminal underground marketplaces in April 2021.

Standing Intelligence Requirements

PII & Fraud

For the most up to date list of ZeroFOX Threat Research’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/alpha_team/advisories/14956

Recommendations

Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks.
If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance.
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account.

Details

On April 9, 2021, the actor "databank0007" posted a data breach package targeting the organization Yam Media. Yam is the largest video website and the second-largest portal website in Taiwan. The website was originally breached in 2013. From this package, ZeroFOX extracted 16,325,560 records with usernames, email addresses, and passwords.

Figure 1: Actor "databank0007" posted a Yam data break package on a cybercriminal marketplace forum