Breach Disclosure: Livpure

Breach Disclosure: Livpure

In August 2020, India-based water and air purifier manufacturer, Livpure, disclosed a data breach resulting in the exposure of over 1 million records. Among these records were 270,000 unique email addresses. Other exposed data included names, phone numbers, physical addresses, and details of purchased items.

Standing Intelligence Requirements

For the most up to date list of ZeroFOX Threat Research’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/alpha_team/advisories/14956

Recommendations

• Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks.
• If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance.
• If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account.

Details

On April 19, 2021, ZeroFOX observed the actor "Drekavac" offering to sell compromised network access and a dumped customer database from Livpure, a large manufacturer of water and air purifiers in India. The actor claims to have obtained the network and database access in April 2021 to 1.8 million user records (names, emails, physical addresses, and phone numbers). The actor did not disclose any fixed price for the stolen data and shared their Jabber handle for communication with potential buyers.

Figure 1: Actor "Drekavac" posts an advertisement selling a Livpure customer database and compromised network access on a cybercriminal marketplace network